Watch out: New ‘CrashStealer’ Mac malware could nab your passwords

Macworld Yet more evidence that owning a Mac doesn’t make you immune to hacking: researchers have identified another piece of malware on macOS, this time one designed to steal your passwords and browser data. It’s been given the name “CrashStealer.” Jamf Threat Labs first noticed and began tracking what appeared to be “an infostealer still in development” in early May, and reports that it had matured to active use by early July. It’s notable for impersonating Apple’s own crash reporting setup. The payload is delivered by a seemingly innocuous meeting app called Werkbit. This dropper, Jamf explains, is particularly dangerous because it seems legitimate: during the research period, it carried both an Apple notarisation ticket and a valid developer ID. Jamf has since reported the issue to Apple, and AppleInsider reports that Apple has revoked those credentials. Hopefully, this should impede the malware’s ability to cause harm. The dropper downloads a di