# New Mac malware disguises itself as Apple's crash reporter 3 essential habits to protect against CrashStealer threat - **Source:** [Latest news](https://brifing.si/source/77d15218-219f-472d-bf40-31b5646d2942) - **Published:** 2026-07-15 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/724bfacc-13e3-4295-94e1-573cc32104c2 ## The threat landscape A new MacOS malware called CrashStealer mimics Apple's crash reporting tool to steal user data. Targeting passwords, keychain entries, and crypto wallets, this malicious software first appeared in development during May and is now actively circulating in the wild. ## How it operates The malware uses convincing names like CrashReporter.dmg and CrashReporter.app. It displays a fake password prompt mimicking genuine MacOS authorization to unlock the keychain. After local validation, it targets password managers and browsers, exfiltrating data to attacker-controlled servers. ## Infection vectors CrashStealer primarily spreads through .dmg files. Interestingly, its main dropper carries a valid Developer ID and Apple notarization. Other common infection methods include ClickFix social engineering techniques and poisoned AI chatbot conversations leading to malicious payloads. ## AI's growing role Cybercriminals are leveraging AI to write malicious code, enhance phishing campaigns, and even create fully autonomous ransomware attack chains. Traditional MacOS attack vectors may soon be overshadowed by more sophisticated AI-driven threats in the near future. ## Protective measures Always verify .dmg file sources. Exercise caution with unexpected password prompts and never ignore Gatekeeper warnings. Regularly update your MacOS system and applications. These simple habits form an effective defense against threats like CrashStealer. ## Critical wake-up call The myth of Mac immunity to malware has been thoroughly debunked. Despite Apple's past marketing claims, MacOS users now face increasingly sophisticated cyber threats. Proactive digital security practices have become more crucial than ever in today's evolving threat landscape. ## Sources covering this story - https://www.zdnet.com/article/crashstealer-mac-malware-masquerades-as-apples-crash-reporter/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._