Cyble discovers new macOS malware that accesses crypto wallets

Cyble security experts have discovered new malware designed for macOS. It can steal passwords and private keys from crypto wallets.

Cyble Research and Intelligence Labs says the new malware, dubbed Atomic macOS Stealer, aims to extract data to access crypto wallets, such as Electrum, Binance, Exodus, Atomic, and Coinomi. In addition, more than 60 software cryptocurrency wallets, such as MetaMask and Phantom, were at risk.

“Atomic macOS Stealer can steal various types of information from a victim’s computer, including Keychain passwords, full system information, desktop files, document folders, and even the macOS password,” according to report researchers.

The malware is distributed as an unsigned disk image file (Setup.dmg). When run, the file prompts you to enter your system password in a fake prompt for privilege escalation.

According to the analytical platform ScamSniffer, in April alone, scammers managed to steal more than $4 million using cryptocurrency phishing sites.

Anastasia Larina