North Korean hackers deploy new macOS malware that tricks AI security tools
Data-stealing malware uses new techniques to undermine automated analysis workflows used by cybersecurity teams
Shreyas Reddy
June 26, 2026
Cybercriminals linked to North Korea are using a newly identified family of malware to target Apple computers that combines traditional data-stealing capabilities with novel attempts to manipulate security tools powered by artificial intelligence (AI), according to cybersecurity researchers.
In a report released Tuesday, US cybersecurity firm SentinelLabs outlined how macOS.Gaslight, a malware designed to infiltrate macOS devices, steal sensitive information and provide remote access to operators.
SentinelLabs assessed with “high confidence” that the malware was linked to North Korean-aligned activity targeting macOS users, and noted that Apple’s built-in XProtect security system had issued a warning.
© Korea Risk Group.Unauthorized reproduction is prohibited.
No part of this content may be reproduced, distributed, or used for commercial purposes without the prior written permission of Korea Risk Group.
