KELA REPORT

The Rise of macOS Infostealers: 2025 in Review

macOS is no longer a niche target: the infostealer families, delivery tricks and stolen data that made 2025 the year of Mac-focused credential theft.

Share:

KELA report cover: The Rise of macOS Infostealers: 2025 in Review

In KELA’s new report, you’ll learn:

  • What’s changed: How macOS moved from “safer by default” to a prime target—and why that perception gap persists.
  • How attacks land: Social engineering, fake installers, malvertising, and bypasses of Gatekeeper/XProtect.
  • About real-world case studies: Atomic Stealer (AMOS) and Quark Stealer—capabilities, pricing models, and monetization paths.
  • What to do now: Practical controls and multi-layered defense strategies to elevate macOS security.

Download the Report

Related Resources

KELA takes pre-attack intelligence to the next level: six new capabilities bring agentic AI to fusion-based threat hunting, investigation, built-in SOAR and early warning

KELA Takes Pre-Attack Intelligence to the Next Level, Turning Early Attacker Signals into Action Before Cyberattacks Launch

KELA and Hitachi Solutions enter into a cybersecurity partnership agreement to accelerate Active Cyber Defense in Japan

KELA Enters into Cybersecurity Partnership Agreement with Hitachi Solutions

KELA report banner: Qilin and Japan: Attackers Probing Japanese Networks Now, beside the report cover

Qilin and Japan: Attackers Probing Japanese Networks