MacOS Malware Steals Telegram Accounts And Chrome Data

Share post:

A technique used by a specific MacOs malware, identified simply as “XCSSET,” steals users’ login information across multiple apps, providing operators with the necessary account theft details.

According to Trend Micro researchers, the malware, which infects local Xcode projects, collects sensitive information from certain applications from infected computer files that it sends to the command and control (C2) server.

Targeting Telegram among other malware applications, the malware created the “telegram.applescript” for the “keepcoder.Telegram” allowing attackers to log into the messaging app as the legitimate owner of the account.

For Google Chrome, the threat actors use a fake dialog to trick users into gaining administrator privileges for all of the attacker’s operations needed to get the Safe Storage Key which is stored in the user’s keychain as “chrome safe storage.” The threat actors gain the information needed to decrypt passwords stored in Chrome.

For more information, read the original story in BleepingComputer.

Featured Tech Jobs

SUBSCRIBE NOW

Related articles

Exim issues email server update, mitigations for 6 zero-day vulnerabilities

All previous versions of Exim are obsolete, the developers warn admi

Cyber Security Today, Oct. 2, 2023 – How to create a cybersecurity awareness program

For October Cyber Security Awareness Month this episode offers tips on how to build an effective awarene

Cyber Security Today, Oct. 2, 2023 – How to create a cybersecurity awareness program

For October Cyber Security Awareness Month this episode offers tips on how to build an effective awarene

Cyber Security Today, Week in Review for the week ending Friday, Sept. 29, 2023

This episode features discussion on October Security Awareness Month, ransomware, teenage hackers and the start of hearings into proposed Canadian privacy a

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways