Mac malware doesn’t need a security flaw when users do the work
AI-summarised brief · reviewed before publication
Bitdefender’s September 2026 macOS Threat Landscape Report, based on 1.5 billion security events from August 2025 to July 2026, shows adware rising to 34.4 % of detections, up from 22.6 % in the previous year, while Trojans fell to 45.2 %. The report highlights “ClickFix” campaigns that trick users into executing malicious Terminal commands, bypassing macOS security checks. It also documents three notarized apps—PodcastsLounge, PDF‑Brain, and PDF‑Ninja—that carried valid Apple Developer IDs yet delivered FlutterShell malware, demonstrating that notarization does not guarantee safety.
💡 Why It Matters
- · The shift toward user‑coerced attacks underscores the growing reliance on social engineering over technical exploits.
- · This trend forces security vendors and Apple to rethink how they validate and monitor signed applications, as attackers can now update malicious behavior without re‑submission.