This underlines the importance of exercising caution and using trusted sources, such as the App Store, for software downloads. Nevertheless, to protect against this threat, users should ensure their operating systems and security software are up to date and refrain from downloading files or clicking links from unfamiliar sources.Īs macOS continues to gain popularity, particularly in enterprise environments, data stored on these devices becomes increasingly valuable to cybercriminals. MacStealer then collects the data, compresses it into a ZIP file, forwards it to the threat actor.Īpple has not yet issued a statement about the malware, and it is uncertain whether MacStealer has been recorded in the CVE.report database that monitors vulnerabilities and exposures. The malware spreads via a “weed.dmg” executable file, which, when launched, presents a fake password prompt to deceive users into providing their passwords. Its developer has revealed that the malware is in the initial stages of development, with plans to introduce more sophisticated features in the future. Offered as a malware-as-a-service (MaaS) on dark web hacking forums, MacStealer’s premade builds are being sold for $100 each. MacStealer can access account passwords, cookies, and credit card information from Firefox, Chrome, and Brave browsers and retrieve multiple file types, such as TXT, DOC, JPG, and ZIP files. The Uptycs threat research team, which discovered MacStealer, has confirmed its compatibility with macOS Catalina (10.15) through to Apple’s latest OS, Ventura (13.2). A recently identified information-stealing malware, MacStealer, is targeting macOS users, compromising their credentials in iCloud Keychain, web browsers, and cryptocurrency wallets, as well as gaining access to various sensitive files.

Kaspersky security cloud mac