MacOS Malware Targets Crypto Wallets Through Cracked Apps
Hackers are using cracked macOS apps to distribute information-stealing malware through DNS records, with the campaign targeting users of macOS Ventura and later. The malware, disguised as an activator for the cracked app, fetches malicious scripts from DNS records and establishes backdoor access to gather and transmit system information. Additionally, it replaces Bitcoin Core and Exodus wallets with backdoored copies to steal users' wallet details. Kaspersky researchers warn that using cracked applications is a common way for malicious actors to compromise users' computers, and this campaign demonstrates the ingenuity of threat actors in finding new methods to deliver malware.