It’s early, but 2025 hasn’t been a great year for Mac cybersecurity.
Less than two months later, we saw numerous Mac malware threats targeting Apple laptops, which are generally considered very safe. These threats range from malicious software that can read screenshots and steal passwords from Infostealers.
Now, Microsoft is identifying resurfaced malware that came back years later, with new malicious features, including theft of sensitive information such as digital wallets and data from legitimate Notes apps.
Hacker illustration at work (Kurt “Cyberguy” Knutsson)
Things you need to know about malware
Microsoft Threat Intelligence I discovered a new version of Xcsset. This is a dangerous MacOS malware that can spread when infecting Xcode projects, the file that developers use to create MAC apps. The malware is currently seen in just a few attacks, but has been upgraded with new tricks to make detection and removal difficult.
One of the biggest changes is how malware hides itself. Nowadays, code is scrambled in a more unpredictable way, making it difficult for security software to recognize. You can also modify some of the code to hide its true purpose and leave it hidden for a long time.
What is Artificial Intelligence (AI)?
If you infect your Mac, the malware will ensure that it will continue to run even after the computer is restarted. This can be done in two ways. First, insert it into the system file that starts when the computer starts. Secondly, replace the shortcut with LaunchPad, the tool used to open the app, and replace it with a fake version that runs both the actual LaunchPad and the malware at the same time.
This malware also makes it more difficult to find new ways to sneak into your Xcode project. If an infected project is shared or downloaded, the malware can spread to other devices without the user realizing it.
People working on Mac (Kurt “Cyberguy” Knutsson)
Spotify playlists are hijacked to promote pirated software and fraud
What data can I steal?
XCSSet malware is designed to steal a variety of sensitive information from infected Macs, putting both personal and financial data at risk. One of the main targets is the digital wallets used to store cryptocurrency. If a user has a crypto wallet on their Mac, the malware will access the funds and try to steal them.
It also allows many users to collect data from the Notes app, which stores personal information, passwords and other sensitive details. If important data is stored in a memo, you can access it and send it to hackers.
Beyond this, malware can remove system information and files. This means you can collect details about the Mac itself, installed applications, and even specific files stored on your device. This includes working documents, stored login credentials, or other valuable information. XCSSet is modular malware, so it can be updated using new features, which could potentially give you the ability to steal more data over time.
Click here to get your Fox business on the go
Woman working on her Mac (Kurt “Cyberguy” Knutsson)
Massive security flaws put the most popular browsers at risk with MAC
5 Tips to Protect Yourself from Mac Malware
Follow these important tips to protect your Mac from the latest malware threats, including the infamous XCSSet.
1. It has powerful antivirus software: Protect your Mac from XCSSet and other threats by installing powerful antivirus software on all your devices. This protection can also warn you that it will phish email and ransomware scams and keep your personal information and digital assets safe. Get the best 2025 Antivirus Protection Winners picks for Windows, Mac, Android and iOS devices.
2. Please note the downloads and links: Download the software from reputable sources such as the Mac App Store and the official websites of trusted developers. Beware of unsolicited emails or messages asking you to download or install the update, especially if it contains a link. Trying to phish Often, they disguise themselves as legitimate update notifications or emergency messages.
3. Please update the software: Make sure both MacOS and all installed applications are up to date. Apple frequently releases security patches and updates to address vulnerabilities. Automatic MacOS updates keep you protected without having to check for updates manually. If you need more help, take a look at me Guide to updating all devices.
4. Use a strong and unique password. To protect your Mac from malware, it is also important to use strong and unique passwords for all your accounts and devices. Do not reuse your passwords on various sites or services. a Password Manager This can be very useful here. Generate and store complex passwords, making it difficult for hackers to crack.
You also don’t have to remember yourself as you track all your passwords in one location and enter them automatically when you log in to your account. By reducing the number of passwords you need to remember, you are less likely to reuse them and the risk of a security breaches. Get my details Find the best expert reviewed password managers of 2025 here.
5. Use two-factor authentication (2FA). Enable 2FA Important accounts such as Apple ID, Google account, email, financial services and more. This adds additional steps to the login process, allowing attackers to access it even if they have a password.
How to delete private data from the Internet
Important points of cart
Mac users can no longer afford to be satisfied. The days when Macs were considered “safe by default” are over. Cybercriminals have been levelled and are moving beyond basic adware to full-fledged information stealers. Swipe password, hijack authentication cookies, intercept OTP, and even empty crypto wallets. The threat has become smarter, more aggressive, and there are no off-limits platforms. Moving on is because the bad guys are definitely the same.
Do you think Apple is doing enough to protect users from rising malware? Write us and let us know cyberguy.com/contact.
Click here to get the Fox News app
For more information about my tech tips and security alerts, sign up for our free Cyberguy Report Newsletter cyberguy.com/newsletter.
Please ask your cart or tell us what stories you would like us to cover.
Follow your cart on his social channels:
Answers to the most asked Cyber Guy questions:
New from Cart:
Copyright 2025 cyberguy.com. Unauthorized reproduction is prohibited.
