Threats to Macs are Increasing

While Macs have traditionally been seen as less vulnerable to malware than Windows PCs, the threat landscape is evolving, and macOS is increasingly targeted by sophisticated cybercriminals. 2024 saw a surge in new Mac malware families, and 2025 is already proving to be a challenging year. Let’s delve into some of the most pressing threats facing Mac users today.

XCSSET: A Resurgent Threat

XCSSET, a complex and potentially devastating malware, has resurfaced with a new variant in 2025. This malware, first discovered in 2020, targets developers by infecting their Xcode projects. If a developer’s infected project is then used by other developers, the malware can spread rapidly, potentially leading to a supply chain attack.

The latest XCSSET variant boasts enhanced obfuscation techniques, making it harder to detect. It also employs new persistence mechanisms, ensuring that the malware remains active even after a system restart. XCSSET’s capabilities are extensive, including:

• Data theft: Stealing information from Safari browsers, Skype, Telegram, WeChat, Notes, and other apps.
• Website backdoors: Injecting JavaScript backdoors into websites.
• Screenshots: Taking screenshots of the user’s screen.
• File encryption: Encrypting files for ransom.

Microsoft has issued warnings about this new XCSSET variant, emphasizing its potential for widespread impact. Developers are urged to exercise caution when downloading Xcode projects and to verify their integrity.

Info Stealers: A Growing Menace

Info stealers are a type of malware designed to steal sensitive information from users’ devices. They have become a significant threat to Mac users in recent years. In 2024, one particular info stealer, Poseidon, accounted for a staggering 70% of all info stealer detections on Macs.

Poseidon targets a wide range of data, including:

• Cryptocurrency wallets: Stealing cryptocurrency from various wallets.
• Passwords: Extracting passwords from web browsers and password managers.
• VPN configurations: Stealing VPN configurations.

Cybercriminals are increasingly using malvertising to distribute info stealers like Poseidon. They create malicious ads that mimic legitimate software or services, tricking users into downloading the malware.

Other Notable Threats

In addition to XCSSET and info stealers, several other malware families are targeting Macs in 2025. These include:

• FrigidStealer: A new info stealer discovered by Proofpoint, distributed through fake update campaigns.
• New Mac Malware Families: Security researcher Patrick Wardle identified 22 new macOS malware families in 2024, including stealers, backdoors, downloaders, and ransomware.

Staying Safe

To protect your Mac from these evolving threats, it’s crucial to:

• Install security software: Use reputable antivirus and anti-malware software that provides real-time protection.
• Be cautious with downloads: Only download software from trusted sources, such as the Mac App Store or the developer’s official website.
• Keep your software updated: Regularly update your macOS and applications to patch security vulnerabilities.
• Be wary of phishing scams: Avoid clicking on suspicious links or opening attachments from unknown senders.
• Exercise caution with Xcode projects: Developers should carefully inspect and verify any Xcode projects downloaded from repositories.

By staying informed and taking proactive security measures, Mac users can significantly reduce their risk of malware infection in 2025 and beyond.

References:

• Microsoft: New Variant of macOS Threat XCSSET Spotted in the Wild: https://www.darkreading.com/vulnerabilities-threats/microsoft-variant-macos-threat-xcsset

• Macs targeted by info stealers in new era of cyberthreats: https://www.malwarebytes.com/blog/apple/2025/02/macs-targeted-by-info-stealers-in-new-era-of-cyberthreats

• An Update on Fake Updates: Two New Actors, and New Mac Malware: https://www.proofpoint.com/us/blog/threat-insight/update-fake-updates-two-new-actors-and-new-mac-malware
• 22 New Mac Malware Families Seen in 2024: https://www.securityweek.com/22-new-mac-malware-families-seen-in-2024/