newly-discovered malware steals passwords and exfiltrates data from infected Macs • Graham Cluley

Years later, I still run into people who believe their Apple Mac computers are magically immune to malware.

This is because malware has been infecting various incarnations of Apple computers longer than PCs, macro malware often doesn’t care what operating system you’re using, and has more than 25 years worth of success. Despite the fact that there are companies that do. Develops antivirus software for Macs, and even Apple himself has been releasing updates to the antivirus defenses built into MacOS since 2009.

yes there are a lot many There’s more malware for PCs than Macs, but that doesn’t mean there aren’t any problems. And while you might feel very smug that you don’t run any kind of antivirus on your Mac, Cropper will probably put the smile off your face.

sign up for newsletter
Security news, advice and tips.

With that in mind, it’s worth sharing that Uptycs’ Boffin shared details of a newly discovered macOS malware last month, which he dubbed “MacStealer.”

Distributed on dark web forums for as little as $100, MacStealer is a tool for stealing passwords, cookies, and credit card details from Google, Firefox, and Chrome browsers, according to Uptypcs. Additionally, the malware can steal keychain data and various types of data files (documents, spreadsheets, presentations, images, databases, archives, etc.) and send the stolen data back to hackers via Telegram.

Despite MacStealer’s creators claiming it’s “first beta”, it claims to support Intel, M1 and M2 Macs and work with macOS 10 (Catalina) through the latest macOS 13 (Ventura). It is

According to Uptycs, the malware spreads in a fairly rudimentary way. Running a boobytrapped .DMG file can result in a fake system configuration prompt requesting the user’s password.

The problem gets worse when hackers get hold of computer passwords.

Although there are no indications that MacStealer is widely used by cybercriminals, it makes sense to protect your computer regardless of the operating system you run.

Did you find this article interesting? Follow Graham Cluley on Twitter Or visit Mastodon to read more exclusive content we post.