Xentric Solutions

I had a conversation recently with a business owner who said, “We’re fine. We use Macs.” 🙂

I completely understand that thinking.

For years, Windows PCs were seen as the main target for cybercriminals. Macs felt safer.

But it’s no longer the case.

Recent research shows that macOS is now just as interesting to hackers as Windows. And the way they’re attacking businesses has evolved in some clever (and worrying) ways.

One of the biggest trends right now is something called info stealer malware ☠️

Info stealers are small programs designed to collect sensitive information from your computer and send it back to criminals. We’re talking about:

⚠️ Saved browser sessions (so they don’t even need your password)
⚠️ Keychains (where Macs store credentials)
⚠️ Cloud access tokens (digital “keys” that keep you logged into services like Microsoft 365 or Google Workspace)
⚠️ Developer credentials
⚠️ Even cryptocurrency wallets

Once they have that, they can take over accounts, send fake invoices, launch ransomware, or access your cloud systems without you realizing 😬

And here’s the most worrying part: They’re not always breaking in through obvious malware downloads 🦠

Microsoft recently reported attackers using fake error messages (a trick known as social engineering).

For example, a pop-up might say there’s a problem with your system and offer a “fix”.

You download what looks like a normal Mac installer file (a DMG file, the standard Mac installation format) and that’s when the malware drops in.

They’ve also seen fake ads on Google promoting things like PDF editors. You click, download, and it looks legitimate. Behind the scenes, it installs an info stealer and sets itself up to stay on the machine.

Even worse, some criminals are hijacking WhatsApp accounts and using them to spread malicious links to trusted contacts. When it comes from someone you know, your guard drops.

What’s changed is the speed and flexibility of these attacks.

Some of the malware is written in cross-platform languages like Python, which means it can easily run on both Windows and Mac environments. That makes it easier for attackers to hit mixed businesses.

Staying protected isn’t about which operating system you use anymore. It’s about how well protected and monitored your systems are 👀

Staff awareness matters. Good security software matters. Monitoring unusual activity matters. And making sure your cloud services are properly secured matters a lot.

🤔 If you’re a Mac-based business, or a mix of Mac and Windows, do you feel confident you’d spot something like this before damage was done?

Your people are drafting emails, summarizing documents, and solving problems faster thanks to AI. It’s great.

But what’s missing in many businesses is the decision about how it should be used.

Without that, people fill in the gaps themselves.
And that’s how data can end up in the wrong places… learn more in the comments.