Pearl Stealer
Intelligence Profile
Malware family identifying osx.pearl_stealer. Origin and technical characteristics tracked via Malpedia.
Intelligence Assessment
osx.pearl_stealer is a malware family whose origin and technical characteristics are tracked via Malpedia.
This malware family has 24 total tracked victims, with 17 in the last 90 days. Top sectors include Education and Technology, with top countries being the US and Egypt.
osx.pearl_stealer is currently active, with its last activity on 2026-03-17 and its last attack on 2026-07-03. The volume of victims in the last 90 days indicates ongoing activity.
Threat Analysis
Pearl Stealer is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.
Ransomware Victims (7)
CTIWATCH tracks 7 organizations claimed as victims by Pearl Stealer on its data leak site, with attack dates, sectors and countries.
View full victims list →Known Campaigns
Osx.Pearl Stealer is conducting an active ransomware campaign targeting organizations across 3 countries. Primary targets: Business Services, Manufacturing. 4 confirmed victims recorded in the last 45 days. Campaign status: ACTIVE (last activity 24 Jul 2026).