Scworld Trojan Malware Surge and Outdated Software Threaten Mac Security
Article Content
- •Trojan malware now constitutes over 50% of all detections on Macs, with Atomic Stealer leading.
- •58% of organizations are using outdated macOS devices, increasing security risks.
- •95% of mobile apps assessed contain at least one medium-severity vulnerability.
Recent reports from Jamf indicate a dramatic rise in trojan malware, which now accounts for over 50% of all malware detections on Macs, with Atomic Stealer being the most prevalent variant. The malware's dominance increased from 16.61% in 2024 to 50.32% in 2025, with Atomic Stealer responsible for 77.08% of trojan activity. Additionally, over half of organizations are running outdated macOS and mobile operating systems, with 58% of Macs having outdated software. This situation is exacerbated by the fact that 95% of assessed mobile apps contain at least one medium-severity vulnerability. The increase in Mac shipments has coincided with a rise in malware samples, with 73% of Macs now having at least one vulnerable app. Attack methods are evolving, with zero-click and browser-based exploits becoming more common. Keeping software updated is critical to mitigating these vulnerabilities.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (7)
Following this threat?
Track Atomic Stealer in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploit in BeyondTrust Remote Support Disclosed BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE. The flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring credentials or user…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…