New macOS Stealer Mimics Apple’s Crash Report Framework to Steal Browser Credentials

CrashStealer, a native C++ macOS infostealer that disguises itself as Apple’s built-in crash-reporting utility to harvest browser credentials, cryptocurrency wallets, password manager data, and keychain contents before encrypting and exfiltrating everything to a remote command-and-control server. Jamf first spotted a suspicious sample on VirusTotal in early May 2026 that appeared to be an infostealer still […]

The post New macOS Stealer Mimics Apple’s Crash Report Framework to Steal Browser Credentials appeared first on Cyber Security News.