
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
Updated PamStealer decrypts its macOS payload only with live C2 help and adds layered persistence.
3
3 stories, newest first · one card per story

Updated PamStealer decrypts its macOS payload only with live C2 help and adds layered persistence.

A new PamStealer variant for macOS spreads via a fake crypto wallet, using server-assisted decryption to steal credentials, Keychain data, and crypto assets.

A fake Mac crypto-wallet app delivers new PamStealer malware that steals passwords and browser credentials.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views