NewsThe Hacker News2026-07-03 08:03 UTC

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. The stealer, discovered by Jamf Threat Labs, is distributed as a compiled AppleScript (.scpt) file impersonating Maccy, a legitimate open-source clipboard manager. It has been codenamed PamStealer owing to its ability to

Other news entries

Newsthehackernews2026-09-25
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
Newsarstechnica-security2026-07-02
Newly discovered PamStealer isn't your typical macOS malware

Source: https://thehackernews.com/2026/07/pamstealer-uses-fake-maccy-sites-and.html

More on PamStealer