# Beware: New ‘CrashStealer’ Mac malware could steal your passwords A new threat for Mac users: CrashStealer can hijack your passwords. - **Source:** [Macworld](https://brifing.si/source/5c5245ce-d063-40e0-bd54-48b60cbc761f) - **Published:** 2026-07-14 - **Original article:** - **On Brifing:** https://brifing.si/s/e510ba54-59a7-4171-aa9a-66986afa3693 ## New threat for Mac users Researchers have identified a new malware for macOS called CrashStealer. This malware aims to steal users' passwords and browser data, posing a significant security risk for Mac users. ## Spreads through a fake app CrashStealer spreads via Werkbit, a seemingly innocuous meeting app. The app carries Apple’s notarization and a valid developer ID, making it easier to gain users' trust. ## Mimics Apple’s crash reporting tool The malware mimics Apple’s own crash reporting system. It downloads a disk image called CrashReporter and convinces users to enter their passwords, allowing it to hijack their data unnoticed. ## Targeted data CrashStealer targets critical information such as browser data, cryptocurrency wallets, and password managers. It can steal data from popular apps like Brave, Chrome, MetaMask, and 1Password. ## Apple takes action Jamf Threat Labs reported the issue to Apple, and Apple revoked Werkbit’s credentials. This step could help curb the spread of the malware. ## Users must stay vigilant Mac users should be cautious of apps like Werkbit and CrashReporter. Even seemingly legitimate system password prompts should be approached with suspicion. ## Sources covering this story - https://www.macworld.com/article/3190701/watch-out-new-crashstealer-mac-malware-could-nab-your-passwords.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._