Moonlock by MacPaw

Virus Bulletin 2026 was a treat from start to finish. Our own Kseniia Yamburh unpacked a macOS stealer, shared the stage with a researcher we usually only know by handle, and got to hear that people actually read our research.

Thank you for having us, VB, and thank you, Seville, for the sunshine! We’re so glad we got to be part of it: on stage, in the hallways, and as a bronze partner.

Now back to the lab to keep cyber threats away from your Macs.

Mac malware can look surprisingly like a subscription business.

Moonlock Lab sees stealers rented to criminals who run their own campaigns — sometimes for around 1,000–3,000/month.

Updates. Support. Control panels. Even ready-made fake pages.

Attackers don’t always need to build malware anymore. Sometimes, they can simply subscribe.

More from Moonlock Lab: moonlock.com/mid-2026-macos…

What can agentic cybersecurity actually do? Forbes asked our @moonlock_lab team.

Mykhailo Pazyniuk’s take: agents take obfuscated malware apart and pull IoCs in minutes, not hours, pivoting to related infrastructure along the way.

Thanks to Ray Fernandez and @Forbes for the feature 📷

forbes.com/sites/ray-fern…

Think someone got into your Gmail?

Start here:

→ change your password
→ check recovery details
→ sign out of unknown devices
→ review recent activity
→ turn on 2FA/passkey

Locked out? Use Google’s official recovery process.

Secure the account first. Investigate second.

Full checklist: moonlock.com/gmail-hacked

A delivery message. A PDF attachment. A small fee to reschedule.

Real or fake?

Phishing works because it often looks completely ordinary.

Before clicking, pause for:

→ unexpected attachments
→ urgency
→ payment requests
→ requests for personal info