OTX Threat: PamStealer: a Rust-based macOS infostealer that validates credentials through PAM
AI Summary
PamStealer is a two-stage macOS infostealer distributed as a compiled AppleScript impersonating Maccy, a legitimate clipboard manager, hosted on a fake domain. The first stage uses JavaScript for Automation with Objective-C APIs to download payloads while avoiding shell commands. The second stage is a Rust-based Mach-O binary that validates stolen credentials through PAM before harvesting, reads b
Discussion
Sign in to join the discussion.
Loading comments…