PANews reported on December 10 that according to Forbes, researchers have confirmed that a malware attack targeting macOS users has been active for four months. The attack steals passwords in the Keychain, as well as session cookies and cryptocurrency wallet information of browsers such as Google Chrome, Brave, and Opera, by disguising itself as malware for video conferencing applications.
According to Tara Gould of Cado Security Labs, attackers use AI-generated content to create fake websites and social media accounts, posing as credible businesses. Victims often contact them through platforms such as Telegram to discuss business opportunities in blockchain or cryptocurrency. After the file is installed, the user is prompted to enter the macOS password to further steal data.
Security experts advise users to be vigilant, especially to unfamiliar business-related links. Using protection tools such as Intego VirusBarrier can effectively protect against such threats.
