CrashStealer malware steals passwords and Mac data

CrashStealer, a new Mac infostealer, reached victims through an Apple-notarized meeting app called Werkbit. The malware steals passwords, browser data, and cryptocurrency credentials behind a fake system prompt. Apple revoked the signing credentials after Jamf Threat Labs reported the findings. The attack requires user interaction to succeed.