Ethereum

Apple

Fantom

Security

mirror

<a href="https://bitcoinworld.co.in/apple-mac-cthulhu-stealer-malware-crypto-wallets/" title="Apple Mac Users Warned About ‘Cthulhu Stealer’ Malware Targeting Crypto Wallets" rel="nofollow"></a>
Cybersecurity firm <a href="https://twitter.com/CadoSecurity/status/1826575059181289912" target="_blank" rel="noopener">Cado</a> Security has warned Apple Mac users regarding a new malware variant named “Cthulhu Stealer,” which is designed to steal personal information and target crypto wallets. 
In a recent <a href="https://www.cadosecurity.com/blog/from-the-depths-analyzing-the-cthulhu-stealer-malware-for-macos" target="_blank" rel="noopener">report</a>, Cado Security highlighted the growing threat to macOS users. 
“While MacOS has a reputation for being secure, macOS malware has been trending up in recent years,” the firm stated. 
<h3 id="span-style-font-weight-400-cthulhu-stealer-masquerades-as-legitimate-software-span">Cthulhu Stealer Masquerades as Legitimate Software</h3> 
The Cthulhu Stealer malware masquerades as legitimate software, such as CleanMyMac or Adobe GenP, appearing in the form of an Apple disk image (DMG). 
Once users download and open this file, they are prompted to enter their password through macOS’s command-line tool, which runs AppleScript and JavaScript. 
After the initial password is entered, the malware prompts for a second password, specifically targeting the Ethereum wallet MetaMask. 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 Recently, Cado Security has identified a malware-as-a-service (MaaS) targeting macOS users named “Cthulhu Stealer”. This blog will explore the functionality of this malware and provide insight into how its operators carry out their activities: <a href="https://t.co/nJCt6RnUfG" target="_blank">https://t.co/nJCt6RnUfG</a> 
 — Cado (@CadoSecurity) <a href="https://twitter.com/CadoSecurity/status/1826575059181289912?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">August 22, 2024</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
Other popular crypto wallets, including those from Coinbase, Wasabi, Electrum, Atomic, Binance, and Blockchain Wallet, are also at risk. 
Once Cthulhu Stealer gains access, it stores the stolen data in text files and proceeds to fingerprint the victim’s system, collecting information such as IP address and operating system version. 
<figure id="attachment_80259" aria-describedby="caption-attachment-80259" style="width: 100%" class="wp-caption aligncenter">
 <img decoding="async" class=" wp-image-80259" src="http://bitcoinworld.co.in/wp-content/uploads/Screenshot-of-Cthulhu-Stealer-400x300.webp" alt="" width="592" height="444" srcset="https://bitcoinworld.co.in/wp-content/uploads/Screenshot-of-Cthulhu-Stealer-400x300.webp 400w, https://bitcoinworld.co.in/wp-content/uploads/Screenshot-of-Cthulhu-Stealer-667x500.webp 667w, https://bitcoinworld.co.in/wp-content/uploads/Screenshot-of-Cthulhu-Stealer-800x600.webp 800w, https://bitcoinworld.co.in/wp-content/uploads/Screenshot-of-Cthulhu-Stealer-768x576.webp 768w, https://bitcoinworld.co.in/wp-content/uploads/Screenshot-of-Cthulhu-Stealer.webp 1024w" sizes="(max-width: 592px) 100vw, 592px">
 <figcaption id="caption-attachment-80259" class="wp-caption-text">
 Screenshot of Cthulhu Stealer
 </figcaption>
</figure> 
&nbsp; 
“The main functionality of Cthulhu Stealer is to steal credentials and cryptocurrency wallets from various stores, including game accounts,” Tara Gould, a researcher at Cado Security, said. 
Cthulhu Stealer shares similarities with another piece of malware called Atomic Stealer, which was discovered in 2023 targeting Apple computers. 
Gould suggests that the developer behind Cthulhu Stealer likely modified Atomic Stealer’s code to create this new strain. 
The malware has been rented out to affiliates for $500 per month through the Telegram messaging platform, with profits shared among the developers. 
However, recent disputes over payments have reportedly caused the main scammers to disappear, leading to accusations of an exit scam. 
The rise of Cthulhu Stealer and other similar threats, like the AMOS malware that clones Ledger Live software, has prompted Apple to take action. 
The tech giant recently announced updates to its macOS, making it more difficult for users to bypass Gatekeeper protections that ensure only trusted applications are run. 
<h3 id="span-style-font-weight-400-florida-woman-sues-google-over-play-store-crypto-scam-span">Florida Woman Sues Google Over Play Store Crypto Scam</h3> 
In another incident, Florida resident Maria Vaca has filed a lawsuit against Google, alleging that the tech giant’s negligence led to her losing over $5 million. 
The lawsuit argued that she was deceived by a crypto investment app called Yobit Pro, which she downloaded from the Google Play Store. 
In April, Google sued two developers for creating 87 fraudulent apps that scammed over 100,000 users, including 8,700 U.S. residents. 
Although Yobit Pro was not mentioned in Google’s lawsuit, the tactics described mirror Vaca’s experience. 
These include fraudulent apps luring users with promises of high returns, only to demand additional payments under the guise of taxes or fees, with no intention of allowing users to withdraw their funds. 
Meanwhile, Google has launched a feature allowing users to search balances of wallets on Bitcoin, Arbitrum, Avalanche, Optimism, Polygon, and Fantom blockchain.

Apple Mac Users Warned About ‘Cthulhu Stealer’ Malware Targeting Crypto Wallets

Table of Contents

ItsBitcoinWorld

Other articles published on Aug 26, 2024

Analyst Who Predicted 2021 Meme Coin Mania Lists 3 Best Cheap Altcoins to Buy Today

7 Best Cheap Cryptos to Invest Now Under 1 Dollar August 25 – Holo, Sats, AMP, Bonk

Pavel Durov’s Paris Arrest Sparks Global Outcry, Telegram Says He Has ‘Nothing to Hide’

Top Cryptocurrencies to Buy Now August 26 – MultiversX, Maker, Aptos

Stacks' Nakamoto Upgrade will revolutionize DeFi on Bitcoin

LINK Innovates, SEI Boosts Accessibility, and Qubetics Offers Whitelist Opportunities

Join our free newsletter for daily crypto updates!