Dossier
CrashStealer
Coverage of CrashStealer in the Nexus archive.
- This fake Apple app can unlock your Mac’s password vault
CrashStealer is a macOS infostealer that impersonates Apple's CrashReporter, uses a notarized installer to bypass Gatekeeper, and steals Keychain data, browser credentials, and crypto wallets. It is distributed via a fake software site requiring a PIN, indicating a targeted campaign.
- New CrashStealer malware poses as Apple crash reporting tool
A new macOS information-stealing malware called CrashStealer pretends to be Apple's crash-reporting tool to steal credentials, keychain data, and crypto wallets.