OTX Threat: CrashStealer: C++ macOS Infostealer Posing as Crash Reporter
AI Summary
A newly discovered macOS infostealer, implemented in native C++, impersonates Apple's crash-reporting framework to harvest sensitive data. The malware is distributed through a signed and notarized dropper application that bypasses Gatekeeper, then downloads and installs the payload from attacker infrastructure. The stealer validates victim passwords locally using dscl, unlocks the login keychain,
Discussion
Sign in to join the discussion.
Loading comments…