Beware: New ‘CrashStealer’ Mac malware could steal your passwords
A new threat for Mac users: CrashStealer can hijack your passwords.
1New threat for Mac users
Researchers have identified a new malware for macOS called CrashStealer. This malware aims to steal users' passwords and browser data, posing a significant security risk for Mac users.
2Spreads through a fake app
CrashStealer spreads via Werkbit, a seemingly innocuous meeting app. The app carries Apple’s notarization and a valid developer ID, making it easier to gain users' trust.
3Mimics Apple’s crash reporting tool
The malware mimics Apple’s own crash reporting system. It downloads a disk image called CrashReporter and convinces users to enter their passwords, allowing it to hijack their data unnoticed.
4Targeted data
CrashStealer targets critical information such as browser data, cryptocurrency wallets, and password managers. It can steal data from popular apps like Brave, Chrome, MetaMask, and 1Password.
5Apple takes action
Jamf Threat Labs reported the issue to Apple, and Apple revoked Werkbit’s credentials. This step could help curb the spread of the malware.
6Users must stay vigilant
Mac users should be cautious of apps like Werkbit and CrashReporter. Even seemingly legitimate system password prompts should be approached with suspicion.
Original article: Macworld — Yeni ‘CrashStealer’ Mac zararlı yazılımı şifrelerinizi çalabilir