KELA REPORT

The Rise of macOS Infostealers: 2025 in Review

macOS is no longer a niche target: the infostealer families, delivery tricks and stolen data that made 2025 the year of Mac-focused credential theft.

Share:

KELA report cover: The Rise of macOS Infostealers: 2025 in Review

In KELA’s new report, you’ll learn:

  • What’s changed: How macOS moved from “safer by default” to a prime target—and why that perception gap persists.
  • How attacks land: Social engineering, fake installers, malvertising, and bypasses of Gatekeeper/XProtect.
  • About real-world case studies: Atomic Stealer (AMOS) and Quark Stealer—capabilities, pricing models, and monetization paths.
  • What to do now: Practical controls and multi-layered defense strategies to elevate macOS security.

Download the Report

Related Resources

KELA and Fujitsu enter into a cybersecurity collaboration agreement to accelerate Active Cyber Defense in Japan

KELA and Fujitsu Enter into Cybersecurity Collaboration Agreement

Abstract lattice graphic showing where AI provider monitoring stops, cover image for the KELA AI Cybercrime Report Q4 2026

KELA AI Cybercrime Report Q4 2026: Inside the criminal market for adversarial AI

KELA on-demand webinar banner: The TeamPCP arrests, from the inside, with Ben Kapon and Jimmy

The TeamPCP arrests, from the inside