Hackers Turn Mac Password Stealer Into RAT That Survives Reboots and Executes Remote Commands

The Icarus macOS stealer, marketed as ICMacOS, has moved beyond smash-and-grab theft. Its latest version installs persistence, keeps a live channel open to its operators, and executes commands sent from a remote server. SOCRadar identified ICMacOS in September 2026 and found two variants. Version 1 focuses on core theft, targeting browser credentials, password manager databases, […]

This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform