PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

Summary

Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. The stealer, discovered by Jamf Threat Labs, is distributed as a compiled AppleScript (.scpt) file impersonating Maccy, a legitimate open-source clipboard manager. It has been codenamed PamStealer owing to its ability to

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.