Jamf Threat Labs

jamf-threat-labs · HIGH · candidate

https://www.jamf.com/blog/category/jamf-threat-labs/

researchlang: enfetch failures: 0last fetch: 2026-07-04

macOS/Apple-platform threat-research lab. PRIMARY source for PamStealer macOS infostealer (2026-07-02), cited in entry 2026-07-04/pamstealer-macos-infostealer-pam-api-password-validation. Added as candidate 2026-07-04 — promote to active after 3 contributing runs. FETCH -> webfetch https://www.jamf.com/blog/category/jamf-threat-labs/ listing, then per-article webfetch for body (article pages resolve 200).

Cited in 1 entry

Citation cadence

Citation days per ISO week (1 weeks of coverage span, total 1).

Jamf Threat Labs documents "PamStealer": a macOS infostealer that validates the victim's password via the PAM API before exfiltrating it2026-07-04