PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

Summary

Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. The stealer, discovered by Jamf Threat Labs, is distributed as a compiled AppleScript (.scpt) file impersonating Maccy, a legitimate open-source clipboard manager. It has been codenamed PamStealer owing to its ability to

News Radar provides aggregated summaries. Full content and copyright remain with the original publisher.