CrashStealer Malware Impersonates Apple Tool to Steal Mac Passwords and Crypto

Cybersecurity researchers at Jamf Threat Labs have identified a new macOS malware strain named CrashStealer that impersonates Apple's crash reporting framework to steal sensitive data, including passwords and cryptocurrency wallet credentials. The malware targets Mac users by disguising itself as a legitimate system tool, tricking victims into granting permissions. Once installed, it exfiltrates login credentials, browser data, and crypto wallet files. The discovery highlights ongoing threats to Apple's ecosystem, which has historically been perceived as more secure than Windows. Jamf recommends users verify crash report prompts and avoid downloading software from untrusted sources. No specific victim count or geographic distribution has been disclosed yet.

Global Impact

This malware represents a growing sophistication in macOS-targeted cybercrime, potentially eroding Apple's security reputation among enterprise and high-net-worth users. For the cryptocurrency industry, it adds another vector for wallet theft, which could dampen retail confidence in self-custody solutions.