CrashStealer is a new macOS infostealer that disguises itself as Apple’s CrashReporter app, using a notarized installer to bypass Gatekeeper and trick users into entering their passwords. Once running, it steals data from browsers, password managers, crypto wallets, and the macOS Keychain, encrypting and exfiltrating the stolen information to a command-and-control server. Users are advised to be cautious of unexpected password prompts, avoid downloading system tools from third-party sites, and use updated security software to protect against such threats.
