Ransom Ain't Goin' Nowhere: Shutting down macOS ransomware with native Apple protections

No ratings

Presented at KawaiiCon 2025 by

Calum Hall

Ransomware on macOS is a forever-simmering volcano of bad things to come. We’ve seen waves of activity before and recent threat intelligence keeps us on our toes. But what if we could detect and kill ransomware in its tracks? That would be awesome - but let’s take that a step further, what if we could use Apple’s own tooling to nullify any impact up until the point of detection? This release of Phorion’s latest research demonstrates the unquestionable benefits of building on top of Apple’s existing tooling.