Fake Crypto Wallet App Spreads PamStealer Malware to Steal Mac Passwords

A fake cryptocurrency wallet download is delivering a new version of PamStealer to Mac users. The attack starts with a convincing website whose installer asks visitors to follow instructions. Running the disguised file starts a hidden chain that can capture the Mac login password and other personal data. This is the third known PamStealer variant. Rather than simply hiding its harmful program inside the initial download, it relies on a live exchange with an attacker-controlled server to unlock the next stage. That change makes the payload harder for researchers to examine without the server. Analysts from…