Meme Kombat

Apple

Security

A new strain of malware by the name of “Cthulhu Stealer” is targeting Apple Mac users and can extract personal information as well as gain access to many crypto wallets including MetaMask.
The new malware appears as an Apple Disk image and disguises itself as a legitimate application such as CleanMyMac and Adobe GenP.
<img decoding="async" src="https://www.cpomagazine.com/wp-content/uploads/2022/04/phishing-scam-targeting-metamask-crypto-wallet-holders-nets-650000-default-settings-stored-seed-phrases-in-icloud_1500.jpg" alt="Phishing Scam Targeting MetaMask Crypto Wallet Holders Nets $650,000; Default Settings Stored Seed Phrases in iCloud - CPO Magazine">
<h2 id="span-style-font-weight-400-cthulhu-stealer-prompts-mac-users-to-enter-their-metamask-password-span">Cthulhu Stealer Prompts Mac Users To Enter Their MetaMask Password</h2>
Mac users who open the malicious Apple Disk image are first prompted to enter their system’s password. Thereafter, a second prompt asks users to enter the passphrase for their <a href="https://insidebitcoins.com/news/ethereum-price-prediction-mastercard-and-metamask-launch-self-custody-debit-card-as-this-sol-gamefi-gem-closes-on-2-million" rel="noopener noreferrer nofollow">MetaMask</a> wallets.&nbsp;
Cthulhu Stealer also targets other popular wallets that may be installed on the users’ device. Wallets such as those from Coinbase, Wasabi, Electrum, <a href="https://insidebitcoins.com/news/binance-to-hire-1000-people-by-year-end-as-annual-regulatory-spending-tops-200-million-bloomberg" rel="noopener noreferrer nofollow">Binance</a>, Atomic and Blockchain Wallet are all at risk.
Information such as the device’s IP address and operating system are also extracted by the malware once it has stored the stolen data in text files.
<h2 id="span-style-font-weight-400-similarities-between-the-new-malware-and-the-atomic-stealer-identified-in-2023-span">Similarities Between The New Malware And The Atomic Stealer Identified In 2023</h2>
Cybersecurity firm Cado Security drew comparisons between Cthulhu Stealer and a malware that was identified in 2023 called Atomic Stealer in a recent <a href="https://www.cadosecurity.com/blog/from-the-depths-analyzing-the-cthulhu-stealer-malware-for-macos" rel="noopener noreferrer nofollow">blog post</a>. Both malwares are designed to steal crypto wallet information, browser credentials and keychain information.
“The functionality and features of Cthulhu Stealer are very similar to Atomic Stealer, indicating the developer of Cthulhu Stealer probably took Atomic Stealer and modified the code,” said a researcher from Cado Security in the blog post. Both malwares even include the same spelling mistakes in their prompts, the researcher added.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Recently, Cado Security has identified a malware-as-a-service (MaaS) targeting macOS users named “Cthulhu Stealer”. This blog will explore the functionality of this malware and provide insight into how its operators carry out their activities: <a href="https://t.co/nJCt6RnUfG" rel="noopener noreferrer nofollow">https://t.co/nJCt6RnUfG</a>
 — Cado (@CadoSecurity) <a href="https://twitter.com/CadoSecurity/status/1826575059181289912?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">August 22, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
Cthulhu Stealer is being rented out on Telegram to affiliates for $500 per month. The lead developer of the malware also gets a percentage of the profits from every successful deployment.
However, scammers behind the malware seem to no longer be active due to disputes over payments that have led to accusations of an exit scam by affiliates.
<h3 id="span-style-font-weight-400-related-articles-span">Related Articles:</h3>
<ul>
 <li style="font-weight: 400"><a href="https://www.linkedin.com/pulse/best-altcoins-invest-unveiling-top-picks-maximum-returns-calsona-9ceye/" rel="noopener noreferrer nofollow">Best Altcoins to Invest In: Unveiling Top Picks for Maximum Returns!</a></li>
 <li style="font-weight: 400"><a href="https://insidebitcoins.com/news/meme-kombat-launches-season-2-with-major-upgrades-grab-limited-edition-fighter-nfts" rel="noopener noreferrer nofollow">Meme Kombat Launches Season 2 With Major Upgrades – Grab Limited Edition Fighter NFTs</a></li>
 <li style="font-weight: 400"><a href="https://insidebitcoins.com/news/simons-cat-price-prediction-cat-surges-37-but-investors-are-rushing-to-buy-this-p2e-doge-with-time-running-out" rel="noopener noreferrer nofollow">Simon’s Cat Price Prediction: CAT Surges 37%, But Investors Are Rushing To Buy This P2E DOGE With Time Running Out</a></li>
</ul>

“Cthulhu Stealer” Malware Targets MetaMask And Other Crypto Wallets On Apple Mac Devices

Table of Contents

Inside Bitcoins

Other articles published on Aug 26, 2024

Bitcoin Price Near $64K – Top 7 Events This Week Potentially Affecting BTC

XRP Unleashed: US Production Company to Release a Movie About Ripple (Details)

Solana-based Popcat sees 96% jump in last 7 days

Next Week’s Top 3 Altcoins You Can’t Ignore: Pawfury on the Spotlight

BNB Chain’s Launches 4YA Ecosystem Celebration: $300K+ Reward Pool and Exclusive NFTs

Ethereum Foundation Sends 35,000 ETH to Kraken

Join our free newsletter for daily crypto updates!