While macOS isn’t one of the most malware-ridden platforms available, that doesn’t mean it’s free of threats. This is checked occasionally, as we now inform you.
At stake is a new malware known as MacStealer, recently discovered and analyzed by security company Utycs. The purpose of this malicious software is to steal the login credentials of the victimized users.
MacStealer is the new threat that macOS users should know about
The main purpose of MacStealer is to collect sensitive information from users. There are several targets, of which we can highlight iCloud Keychain credentials, credit card data, cryptocurrency wallets, cookies, documents, and more.
MacStealer uses the installation file as the entry vehicle for macOS systems grass.dmg. If you come across this file, this is the first warning sign and don’t hesitate to remove it from your computer.
Those who run this file due to carelessness or lack of information will be faced with a dialog box asking for their access password. Justify it with the need to access system settings, but the goal is simply to collect your credentials.
This step is extremely important for this malware, as it cannot access iCloud Keychain data in any other way. However, if you provide your master password, this malicious software will have an open door to any data present on your macOS computer.
Once that data is collected, it will be grouped into a file that will be sent to the servers of the MacStealer authors. Subsequently, they will be put up for sale on platforms such as Telegram channels dedicated to these practices.
The amount required for each data package can be as little as $100. It is not a very large amount compared to what is usually seen in this type of illegal practice.
How to prevent this type of problem
The main preventive measure for these types of schemes is to install applications only from certified platforms. The safest is the App Store, developed and controlled by Apple itself.
You should also keep your macOS constantly up to date so you don’t miss out on the latest security updates. Installing an antivirus program can also be a good preventative measure.