Particle.news

New macOS Malware 'Cthulhu Stealer' Poses Major Data Theft Risk

Disguised as popular apps, the malware targets system passwords, iCloud Keychain, cryptocurrency wallets, and more.

Overview

  • Cthulhu Stealer impersonates apps like CleanMyMac and Grand Theft Auto IV to trick users into installing it.
  • Once installed, it prompts users to enter system and MetaMask passwords, stealing sensitive information.
  • The malware compresses stolen data into a ZIP file and sends it to a command-and-control server.
  • Researchers note that the malware is sold as a service for $500 per month on the dark web.
  • Apple's upcoming macOS Sequoia will include enhanced security measures to combat such threats.