Cthulhu Stealer
Summary
The Cthulhu Stealer is further equipped to collect system information and extract iCloud Keychain passwords using an open-source tool called Chainbreaker. The gathered data, which includes web browser cookies and Telegram account information, is then compressed into a ZIP archive and sent to a Command-and-Control (C2) server for exfiltration. The group behind this malware is reportedly no longer active, partly due to disputes over payments, leading to accusations of an exit scam by affiliates. Its crucial to download software only from reputable sources, avoid installing unverified applications and keep systems updated with the latest security patches. Apple has acknowledged the rise in macOS malware and, earlier this month, announced an update for its upcoming operating system version, Sequoia.
Classifications
AskAI Classifications
LabelsLinked Companies
