Moonlock by MacPaw

Mac malware can look surprisingly like a subscription business. Moonlock Lab sees stealers rented to criminals who run their own campaigns — sometimes for around 1,000–3,000/month. Updates. Support. Control panels. Even ready-made fake pages. Attackers don’t always need to build malware anymore. Sometimes, they can simply subscribe. More from Moonlock Lab: moonlock.com/mid-2026-macos-…

What can agentic cybersecurity actually do? Forbes asked our @moonlock_lab team. Mykhailo Pazyniuk’s take: agents take obfuscated malware apart and pull IoCs in minutes, not hours, pivoting to related infrastructure along the way. Thanks to Ray Fernandez and @Forbes for the feature 📷 forbes.com/sites/ray-fernand…

Think someone got into your Gmail? Start here: → change your password → check recovery details → sign out of unknown devices → review recent activity → turn on 2FA/passkey Locked out? Use Google’s official recovery process. Secure the account first. Investigate second. Full checklist: moonlock.com/gmail-hacked

That app might not be what it says it is. Mac malware can hide behind familiar apps, cracked software, fake updates, or normal-looking installers. The trick isn’t always breaking into your Mac. Sometimes, it’s convincing you to let the wrong app in. What to watch for: moonlock.com/mac-apps-infost…

Not every risky Mac app looks risky. Malware can hide behind familiar apps, cracked software, fake updates, or normal-looking installers. A few red flags: → unfamiliar download source → “right-click to install” → paste something into Terminal → bypass Mac security The safest download starts with the source. More: moonlock.antimalware.app/gam…

For #CybersecurityAwarenessMonth, we’re sharing a series of simple security tips throughout October. First up: “Macs don’t get malware.” The threat landscape has changed. In 2025, Moonlock Lab saw: ↑67% backdoor variants ↑17% stealer variants And they don’t always look suspicious. Think you’d spot the red flags? 👀 Test yourself in the Moonlock Game Hub: moonlock.antimalware.app/gam…

A fake Zoom download can still look a lot like Zoom. Moonlock Lab @moonlock_lab is tracking Sonoma, a macOS stealer hiding behind familiar names like Zoom, Slack, StreamYard, and Brave Talk. It can target passwords, browser data, developer secrets, and crypto wallets. The trick isn’t always a zero-day. Sometimes it’s simply getting you to trust the wrong download. Here’s what to watch for 👇 hackernoon.com/downloading-z…

Your Mac apps may have access to more of your data than you think. Apple just patched 150+ flaws in macOS Tahoe 26.7. 18 of them involved ways malicious apps could access user data. No reported exploitation — but a good reminder to update your Mac and pay attention to what your apps can access. We broke down what changed 👇 moonlock.com/apple-patches-m…

For SMBs, the attack surface is bigger than a list of devices. Cloud accounts, websites, company Macs, and employee devices are all part of the same connected target. Our Mykhailo Pazyniuk @xor3r shared his perspective with @Forbes on how SMBs can strengthen that surface as AI reshapes cybersecurity. Thanks to Ray Fernandez for including Moonlock’s expertise in the piece. 🔗 forbes.com/sites/ray-fernand…

Moonlock by MacPaw just won a Red Dot Award 2026 in the Interface & User Experience Design category. Great design makes even complex things feel simple, and we're happy to see that approach recognized. From day one, we designed Moonlock to make Mac protection clear, approachable, and easy to use. An intuitive interface, plain-spoken copy, thoughtful interactions, and hand-drawn illustrations all work together to make cybersecurity feel more human. Good design isn't just about how a product looks. It's about how easily people understand it, trust it, and make it part of their everyday lives. We’re incredibly proud of the team behind Moonlock — and happy to see their work recognized by Red Dot ❤️

Most WhatsApp hacks don’t start with someone “breaking” encryption. They start with something much simpler: a verification code, a QR scan, or one convincing link. Here’s how WhatsApp accounts actually get compromised — and how to spot it before it happens. moonlock.com/whatsapp-hacked

A fake macOS update that takes over your entire screen, then asks you to paste a "verification code" into Terminal. Real macOS updates have never asked for that. Not once. Not ever. $890K gone across 281 transfers so far. moonlock.com/fake-macos-upda…

You download a VPN to be more secure. But what if the VPN itself is the problem? 👀 An audit of 4,000+ VPN apps found hundreds of questionable links on official app stores — including unencrypted HTTP pages, hidden redirects, and even abandoned domains later taken over by scammers. Being on the App Store doesn’t automatically make an app trustworthy. We took a closer look at what Mac users should check before hitting “Install.” 👇 moonlock.com/vpns-appstore-e… #CyberSecurity #MacSecurity #Privacy #VPN

Sharing a few moments from Black Hat USA in Las Vegas 🙌 Our PR Specialist @nina_yours and @patrickwardle say hi! Great conversations, new connections, and plenty of cybersecurity talk. 😄 See you next year! #BHUSA – at Las Vegas, NV