سرقت رمزهای عبور زنجیره کلید و کیف پول‌های رمزنگاری‌شده توسط بدافزار جدید اتمی macOS به نام MacStealer

???????? ????? ?? ??? ????? ?? ??? ??????? ???? ???? ?????????? macOS ??? ?? ??? Atomic macOS Stealer (?? AMOS) ?? ?????? ?? ???? ???? ???? ?? ??? ????? ? ?? ????????? ????? MacStealer ??????????.

?????? Cyble ?? ?????? ??? ????????: «Atomic macOS Stealer ???????? ????? ?????? ?? ??????? ?? ?? ?????? ?????? ???? ???? ?????? ?????? ???? Keychain? ??????? ???? ?????? ??????? ?? ?????? ? ???? ????? ? ??? ??? ???? macOS».

?? ???? ????????? ?? ??????? ?? ??????? ??????? ???? ?? ????????? ?? ? ??? ??????? ?????? ??????? ????? Atomic? Binance? Coinomi? Electrum ? Exodus ????? ???. ???????? ????? ?? ??? ?? ?? ????????????? ?? ??????? ??????? ??? ?? ??? ?? ????? ???? ?????? ???????? ?? ?????? ?????.

??? ??????? ?? ??? ?? ???? ????? ???? ???? ????? (Setup.dmg) ??? ?? ????? ????? ?? ?????? ???????? ??? ???? ????? ??? ?? ?? ?? ????? ???? ???? ??? ?? ???????? ?? ?????? ??? ? ?????????? ???? ??? ?? ????? ??? – ?????? ?? MacStealer ??? ?? ??? ????? ???.

????? ???? ????? ??????????? ???? ????? ??????? ???????? ???? ????? ????? ???? ??? ??????? ???? ?????? ? ????? ?? ??? ???? ????????? ?????? ???????? ????.

??????? ??? ????? ?? ?? ?? ????? ???? ?? VirusTotal ????? ??? ?????? ??? “Notion-7.0.6.dmg” ?? ???? ?? ???? ?????? ???????? ?????? ????? ?????????????? ????? ??????. ???? ????????? ??????? ???? MalwareHunterTeam ???????? «Photoshop CC 2023.dmg» ? «Tor Browser.dmg» ????? ???????.

Cyble ???????? ???: ??????????? ????? Atomic macOS Stealer ????????? ?? ??????????? ?? ????????????? ?? ??????? ??????????? ?????? ??? ????.

??? Atomic ?? ???????? ??????????? ?????? ???????? iCloud Keychain ? ?????? ??????? ????????? ?? ????????? ?? (????? ?????? ????? ????? ??????? ???????? ???????? ???? ???????) ? ???????? ??? ??? ?????? ????? ?????? ?? ???? ?? ?? ????? ZIP ????????? ? ????? ???????. ??? ???? ZIP ??????? ??????? ??? ?? ????????? ??????? ?? ??? ????????? ????? ??????.

??? ????? ????? ????? ??? ???? ?? ????? macOS ?????? ?????????? ????? ?? ?? ??? ????? ????? ?? ???????? ?? nation-state ???? ??????? ?????????? ??? ??? ??? ? ??? ??? ????? ??? ?? ??????? ??? ??????????? ?? ?? ????? ??????????? ?????? ? ??? ????? ????? ???? ?????????? ?? ???? ????? ??????? ?????? ?? ????? ???? ? ?? ??? ???? ???????? ????? ?????? ??? ?? ???? ????? ?? ????? ??????? ????.

?????

[?] https://thehackernews.com/2023/03/new-macstealer-macos-malware-steals.html

[?] https://blog.cyble.com/2023/04/26/threat-actor-selling-new-atomic-macos-amos-stealer-on-telegram

[?] https://www.virustotal.com/gui/file/15f39e53a2b4fa01f2c39ad29c7fe4c2fef6f24eff6fa46b8e77add58e7ac709/detection

[?] https://www.virustotal.com/gui/file/e26e45d4f5fee9d0825610e25349d43511a65e6d0f2c4c68935b0cd9fee81954/detection

[?] https://www.virustotal.com/gui/file/db3efff600f9d798b55a21c148f83809ee850ba1af4ecb0d32b62816fcf1cc55/detection

[?] https://thehackernews.com/2023/04/lazarus-subgroup-targeting-apple.html

[?] https://thehackernews.com/2023/04/new-atomic-macos-stealer-can-steal-your.html