Jamf Blog

Posts in the Jamf Threat Labs Category

Dark, moody illustration of a mobile phone with a broken lock on the screen and 0s and 1s coming out of the lock, representing lost user data

September 17, 2025 by Jamf Threat Labs

Jamf Threat Labs discovers apps that leak credentials

Jamf Threat Labs

Two mobile apps available for download are leaking personally identifiable information. Jamf Threat Labs investigates.

Mac is safe from ChillyHell, and similar threats, thanks to Jamf.

September 8, 2025 by Jamf Threat Labs

ChillyHell: A Deep Dive into a Modular macOS Backdoor

Jamf Threat Labs

Jamf Threat Labs performs a deep dive on the modular malware that has been mysteriously maligning macOS since 2021.

Attacker gaining access to personal data via third-party app store apps

August 4, 2025 by Jamf Threat Labs

Flekst0re: third-party app store security evaluation

Jamf Threat Labs

Third-party app stores introduce risk. Jamf Threat Labs investigates.

End user using a laptop with an infostealer installed

July 16, 2025 by Jamf Threat Labs

Signed and stealing: uncovering new insights on Odyssey infostealer

Jamf Threat Labs

Last week, security researchers at Moonlock published new findings on the latest version of Atomic Stealer (AMOS), highlighting significant updates — including the addition of a backdoor. Around the same time, Jamf Threat Labs independently analyzed samples that exhibit many of the same characteristics detailed in Moonlock’s research.

.lazy {display:none !important;}

May 12, 2025 by Jamf Threat Labs

A python in disguise: unpacking PyInstaller malware on macOS

Jamf Threat Labs

Attackers are using PyInstallers to deploy infostealers on macOS. Jamf Threat Labs investigates this newly discovered technique.

Illustration of a person analyzing events in front of three computer monitors.

February 28, 2025 by Jamf Threat Labs

Event analysis with Jamf telemetry

Security, Jamf Threat Labs

Endpoint telemetry is crucial for securing your device fleet. Learn how Jamf can help your organization analyze a variety of events.

Jamf Protect minimizes risk from vulnerabilities that threaten the confidentiality of your business data.

December 10, 2024 by Jamf Threat Labs

Unauthorized access to iCloud: analyzing an iOS vulnerability that could expose sensitive data to attackers

Jamf Threat Labs

Jamf Threat Labs has discovered a bypass vulnerability in the Transparency, Consent and Control (TCC) subsystem in iOS that fails to notify users when another application tries to access sensitive information such as photos, GPS location, contacts and more. Read on to learn more about our findings.