Security experts at Cyble Research discovered a new malware designed specifically for macOS that steals passwords and private keys from cryptocurrencies.</div
The Cyble Research and Intelligence Labs (CRIL) blog reports that the new malware, called Atomic macOS Stealer (AMOS), is focused on extracting data to access cryptocurrencies such as Electrum, Binance, Exodus, Atomic and Coinomi.
In addition, more than 60 plugins, such as MetaMask and Phantom, are under threat.
“Atomic macOS Stealer can steal various types of information from a victim’s computer, including Keychain passwords, full system information, desktop files, document folders, and even macOS passwords,” Cyble researchers said in a technical report.
The malware takes the form of an unsigned disk image file (Setup.dmg) that, when launched, prompts the victim to enter their system password in a fake privilege request-a method also used by MacStealer.
According to analytics platform ScamSniffer, users have lost more than $4 million in the past month as victims of phishing cryptocurrency sites.