Click here to download all references as Bib-File.
| 2023-08-21 ⋅ SentinelOne ⋅ XLoader's Latest Trick | New macOS Variant Disguised as Signed OfficeNote App Xloader |
| 2023-07-05 ⋅ SentinelOne ⋅ BlueNoroff | How DPRK’s macOS RustBucket Seeks to Evade Analysis and Detection RustBucket |
| 2022-09-26 ⋅ SentinelOne ⋅ Lazarus ‘Operation In(ter)ception’ Targets macOS Users Dreaming of Jobs in Crypto Interception |
| 2022-05-09 ⋅ From the Front Lines | Unsigned macOS oRAT Malware Gambles For The Win oRAT |
| 2022-05-09 ⋅ SentinelOne ⋅ From the Front Lines | Unsigned macOS oRAT Malware Gambles For The Win |
| 2022-03-21 ⋅ SentinelOne ⋅ The Art and Science of macOS Malware Hunting with radare2 | Leveraging Xrefs, YARA and Zignatures AbstractEmu Vigram |
| 2022-02-01 ⋅ SentinelOne ⋅ Sneaky Spies and Backdoor RATs | SysJoker and DazzleSpy Malware Target macOS DazzleSpy SysJoker |
| 2021-11-15 ⋅ SentinelOne ⋅ Infect If Needed | A Deeper Dive Into Targeted Backdoor macOS.Macma CDDS |
| 2021-09-20 ⋅ SentinelOne ⋅ Defeating macOS Malware Anti-Analysis Tricks with Radare2 EvilQuest |
| 2021-07-26 ⋅ SentinelOne ⋅ Detecting XLoader | A macOS ‘Malware-as-a-Service’ Info Stealer and Keylogger Xloader |
| 2021-03-18 ⋅ SentinelOne ⋅ New macOS malware XcodeSpy Targets Xcode Developers with EggShell Backdoor |
| 2021-01-11 ⋅ Sentinel LABS ⋅ FADE DEAD | Adventures in Reversing Malicious Run-Only AppleScripts OSAMiner |
| 2020-12-02 ⋅ SentinelOne ⋅ APT32 Multi-stage macOS Trojan Innovates on Crimeware Scripting Technique OceanLotus |
| 2020-11-05 ⋅ SentinelOne ⋅ Resourceful macOS Malware Hides in Named Fork Bundlore |
| 2020-07-27 ⋅ SentinelOne ⋅ Four Distinct Families of Lazarus Malware Target Apple’s macOS Platform AppleJeus Casso Dacls WatchCat |
| 2020-07-08 ⋅ SentinelOne ⋅ “EvilQuest” Rolls Ransomware, Spyware & Data Theft Into One EvilQuest |
| 2020-06-08 ⋅ SentinelOne ⋅ A Guide to macOS Threat Hunting and Incident Response |
| 2020-05-15 ⋅ SentinelOne ⋅ A Guide to macOS Threat Hunting and Incident Response |
| 2018-09-20 ⋅ SentinelOne ⋅ On the Trail of OSX.FairyTale | Adware Playing at Malware FailyTale |