Microsoft Defender Experts report that since late 2025 infostealer campaigns increasingly target macOS and cross-platform environments, using Python and trusted utilities to deliver credential-stealing malware. They observed campaigns such as DigitStealer, MacSync, AMOS, PXA Stealer, and Eternidade Stealer delivered via fake installers, phishing, WhatsApp abuse, and malvertising. The report provides detection coverage and mitigation guidance organizations can implement to detect, mitigate, and respond.
Key Points
- 1Documented expansion of infostealers to macOS, Python, and cross-platform delivery since late 2025
- 2Demonstrated use of fileless execution, AppleScript, signed binaries, and trusted platforms to evade defenses
- 3Recommend actionable detection and mitigation: monitor Terminal activity, block unsigned DMGs, and apply XDR rules
Scoring Rationale
High novelty and actionable mitigations from Microsoft Defender Experts, but topic is cybersecurity-focused rather than core AI/ML.
Sources
Public references used for this report.
Practice interview problems based on real data
1,625 SQL & Python problems across 15 industry datasets — the exact type of data you work with.
Try 250 free problems
