Kurzfassung
CrashStealer is a new macOS infostealer that impersonates Apple's CrashReporter component, uses a notarized installer to slip past Gatekeeper, and tricks users into typing their system password into a fake macOS prompt. Once entered, the...
Wie es funktioniert
CrashStealer is a new macOS infostealer that impersonates Apple's CrashReporter component, uses a notarized installer to slip past Gatekeeper, and tricks users into typing their system password into a fake macOS prompt. Once entered, the...
Warnzeichen
- Unexpected request to download a standalone "CrashReporter" app from a third party site. An installer unlocked only by a private PIN shared in a meeting invite or chat. A system style password prompt appearing immediately after launching an unfamiliar app claiming to be a built in macOS component
Was tun
- 1Never enter your macOS login password at prompts triggered by apps you did not deliberately install. Verify PIN gated download requests through a separate, trusted channel before installing anything. Keep macOS and reputable security software updated, and avoid storing high value crypto wallets and password
Quelle
malwarebytes
Quelle geprueft vom Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/07/this-fake-apple-app-can-unlock-your-macs-password-vaultFAQ
Ist CrashStealer: Fake Apple CrashReporter app steals Mac Keychain passwords ein reales Betrugsmuster?
Ja. Behandeln Sie Nachricht, Anruf oder Zahlungsaufforderung als verdaechtig, bis ein offizieller Kanal sie bestaetigt.
Was sind die ersten Warnzeichen?
Unexpected request to download a standalone "CrashReporter" app from a third party site. An installer unlocked only by a private PIN shared in a meeting invite or chat. A system style password prompt appearing immediately after launching an unfamiliar app claiming to be a built in macOS component
Was sollte ich zuerst tun?
Never enter your macOS login password at prompts triggered by apps you did not deliberately install. Verify PIN gated download requests through a separate, trusted channel before installing anything. Keep macOS and reputable security software updated, and avoid storing high value crypto wallets and password
Kann LegalAudit meinen Fall pruefen?
Ja. Starten Sie den kostenlosen Chat und fuegen Sie Nachricht, Link, Absender oder Zahlungsdaten ein.