Cybersecurity News
Filters
Filtered by tag: information stealer × Clear
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
Matched: Artificial Intelligence, Claude, Gemini
A fake Web3 accelerator is luring developers with promises of free AI credits for Claude and Gemini, coding tools, and security audits, while distributing malicious npm packages. The packages deploy information-stealing malware and backdoors targeting both Windows and macOS systems, according to Elastic Security researchers.
AmnesiaStealer Gives Hackers Hidden Control of Logged-In Browsers on Macs
Matched: cryptocurrency
AmnesiaStealer is a new macOS malware spread via fake GitHub pages that trick users into running a Terminal command. Beyond stealing passwords, cookies, and keychain data, it can silently mirror an active browser session in a hidden Chromium instance, giving attackers real-time control of already-authenticated accounts. This makes MFA protections ineffective. A LaunchDaemon ensures persistence after the initial infection.
Fake CAPTCHA Tricks Mac Users Into Installing a Backdoor That Steals Passwords and Mines Crypto
Matched: cryptocurrency
A ClickFix campaign is targeting Mac users with a fake CAPTCHA page styled as "TrustKey" that tricks victims into running a malicious Terminal command. The command fetches an AppleScript payload via Cloudflare Workers, installs a persistent LaunchAgent, and uses blockchain-based EtherHiding to locate its command server. The backdoor steals browser credentials, keychain data, and crypto wallet information, while also deploying XMRig to mine Monero. Any CAPTCHA requesting Terminal access should be treated as malicious.