Phishing Campaign Targets macOS Users with Fake Compliance Emails

A sophisticated phishing campaign has emerged, targeting macOS users through fake compliance emails that contain malicious Word and PDF attachments. These emails impersonate legitimate audit and compliance notifications to deceive users into downloading advanced malware designed to steal credentials and establish remote access. The campaign was detected by Chainbase Lab and utilizes social engineering tactics combined with multi-stage fileless payloads.