Fake Mac Clipboard App Delivers New Password-Stealing Malware

[_act_]

If this has been posted before since last week Thursday, you can let me know so that I can lock this topic.

It is about a malware, new Mac infostealer dubbed PamStealer, impersonating the open-source Maccy clipboard manager to steal passwords and more.

Maccy is a free macOS open source clipboard manager. It keeps a history of what that has been copied which you can searched for. It helps in quick reuse of text, images, files and other clipboard content instead of copying them again.

Mac users searching for the open-source clipboard manager Maccy are being targeted by a fake version of the app that installs a new Rust-based infostealer dubbed PamStealer, according to cybersecurity firm Jamf Threat Labs. If successful, the malware could steal users’ passwords and crypto wallet keys.

It is still the same old way, but some people will still fall into the scammers trap by downloading the fake app, thinking it is the legit app.


You can also read about the malware that is promoted by sponsored advertisement through the same link in the quote:

In an X post last week, the company said it was investigating a sponsored advertisement on X promoting DynamicLake that redirected users to dynamicmacisland[.]com, where they were instructed to open Terminal and execute an installation command.

“The advertisement was delivered through a verified X account, adding another layer of trust to the social engineering,” the firm wrote. “Analysis of the payload revealed a recent Atomic (MacSync) Stealer variant.”

[Chinesebaby]

It is still the same old way, but some people will still fall into the scammers trap by downloading the fake app, thinking it is the legit app.

Its actually sad with how the high rate of internet scam is actually getting rampant today, and it's just looking like the only way to staying safe from not falling victim to this is just to have a complete separate device that holds all your financial apps and crypto wallets and exchange, while also having a completely separate Gmail address. Because there is no how using a single device won't fall victim to this if these kinds of apps are been allowed to be launched on both IOS and Android mobile stores. So with this news, people do actually needs to be more security conscious than ever.

[PostQuantumBTC]

Its actually sad with how the high rate of internet scam is actually getting rampant today, and it's just looking like the only way to staying safe from not falling victim to this is just to have a complete separate device that holds all your financial apps and crypto wallets and exchange, while also having a completely separate Gmail address. Because there is no how using a single device won't fall victim to this if these kinds of apps are been allowed to be launched on both IOS and Android mobile stores. So with this news, people do actually needs to be more security conscious than ever.

It is true that hacks in crypto are more than before, but they were many before. If it is about malware it is very common before, you can see many threads on this forum about it some many years ago. I guess they are even born into crypto, I mean as crypto started existing, they also started existing. It is people that will have to avoid the bad people.

It is good to have a separate wallet like hardware wallet or cold wallet that you can set aside for high part of your holding but also still be very careful of the malware. That is what I did and it has been helping me till today.

[Emjay24]

It is still the same old way, but some people will still fall into the scammers trap by downloading the fake app, thinking it is the legit app.


You can also read about the malware that is promoted by sponsored advertisement through the same link in the quote:

On a first search with Google, you see these two results

both looks almost the same and you might click on the second site because it has a .com ending, but the official site is the first one https://maccy.app

If you visit the https://maccy.app, you'll see the warning at the top of the landing page

There is a provision to download the software there or an accurate redirect link to the original version on apple stores. It's quite unfortunate that a lot of people download apps blindly from the stores and that's a point of failure.

[348Judah]

The moment you landed on any application that is not the original intended one for you to use, they know that you are most likely to be attacked because they are going to take advantage of this against you, we are expected to always ensure that we landed at the right platform and make use of the official app and downloaded from the right source, any fake app will make use of we always have one or two things to phish on us, as their main intention was to attack and still our asset by diverse means being set up if we fall their trap.

[pawanjain]

If this has been posted before since last week Thursday, you can let me know so that I can lock this topic.

It is about a malware, new Mac infostealer dubbed PamStealer, impersonating the open-source Maccy clipboard manager to steal passwords and more.

Maccy is a free macOS open source clipboard manager. It keeps a history of what that has been copied which you can searched for. It helps in quick reuse of text, images, files and other clipboard content instead of copying them again.

Thanks for posting this. I have recently shifted from a windows to mac and still new to the mac OS.
This information is useful for me since it will keep me aware of staying away from such apps.
I haven't been a fan of clipboard managers anyway but at least I got to know that there are phishing apps for mac too.

[promise444c5]

Not a fan of clipboard.. I don’t know why people need to store as many as possible data  on clipboard just to carry it about every site they visit even sensitive data like passwords  .

Mac has a clipboard, but only one item at a time and it clears whenever you paste such item.

I haven't been a fan of clipboard managers anyway but at least I got to know that there are phishing apps for mac too.

Incase you’re considering it, go directly to their GitHub repo : https://github.com/p0deje/Maccy , you will find every necessary details and download options and sources .

Don’t trust your clipboard BTW

[AVE5]

It is still the same old way, but some people will still fall into the scammers trap by downloading the fake app, thinking it is the legit app.

Yes still the old ways of the online scammers attacking crypto user's in their various sites on targets to steal their funds which either happens through the clipboard malware or poisoning the user's on targets by wallet address poisoning where the users single handedly makes the mistakes from his end and send the funds to the scammers address.
This is why it's good to crosscheck wallet address from transaction history or better still, don't hold on to your past transaction history but copy the address newly from the original folder.
Hence, the Maccy has also warned that only maccy.app is their official site were their legitimate app can be downloaded. This follows after the conformation that a fake site is impersonating them to steal from the user's.

[Charles-Tim]

The moment you landed on any application that is not the original intended one for you to use, they know that you are most likely to be attacked because they are going to take advantage of this against you, we are expected to always ensure that we landed at the right platform and make use of the official app and downloaded from the right source, any fake app will make use of we always have one or two things to phish on us, as their main intention was to attack and still our asset by diverse means being set up if we fall their trap.

Yes, this is true. But not all malware are created for stealing. Crytojacking may not be common again, but it is created to secretly mine crypto for the hackers on your device. Another one is randomware which scammers used to target companies or some people to demand for ransom before the device can work. Another are the virus which can disrupt your smooth computer activities or even render the device not useful until the virus is deleted.

Not a fan of clipboard.. I don’t know why people need to store as many as possible data  on clipboard just to carry it about every site they visit even sensitive data like passwords  .

Are you sure about this? How are you able to make use of copy/paste if you are not a fan of clipboard? I only do not use it to copy sensitive information, but I like it.

[promise444c5]

Not a fan of clipboard.. I don’t know why people need to store as many as possible data  on clipboard just to carry it about every site they visit even sensitive data like passwords  .

Are you sure about this? How are you able to make use of copy/paste if you are not a fan of clipboard? I only do not use it to copy sensitive information, but I like it.

Haha you got me there.. although, not a fan doesn’t mean I don’t use it at all. Probably it’s not the right word  to use there but what I’m trying to say is that, I don’t use copy and paste for everything possible especially passwords unless it’s a really really long one or tried to type it more than twice and got it wrong then I’m forced to use it.

I use it because it makes life easier anyway and of course, I use it for copying addresses because it’s long , but I don’t trust it regarding that aspect .. there’s always a need to Verify .

[Charles-Tim]

[I use it because it makes life easier anyway and of course, I use it for copying addresses because it’s long , but I don’t trust it regarding that aspect .. there’s always a need to Verify .

I also use the one for just Windows and Android. On the Android, it can copy text of up to 6, although more on other Android like Samsung which can copy more and also leave it for longer period of time if you do not delete it. You can even pin it for it not to be deleted on Android devices but which I avoid and being conscious of clipboard malware. I do not copy seed phrase and other information like that. Also it does not get to the extent that I will download clipboard, I use the one that comes with the phone. This one is even better, some people are downloading common keyboard.

[Grace333]

Its actually sad with how the high rate of internet scam is actually getting rampant today, and it's just looking like the only way to staying safe from not falling victim to this is just to have a complete separate device that holds all your financial apps and crypto wallets and exchange, while also having a completely separate Gmail address. Because there is no how using a single device won't fall victim to this if these kinds of apps are been allowed to be launched on both IOS and Android mobile stores. So with this news, people do actually needs to be more security conscious than ever.

It is true that hacks in crypto are more than before, but they were many before. If it is about malware it is very common before, you can see many threads on this forum about it some many years ago. I guess they are even born into crypto, I mean as crypto started existing, they also started existing. It is people that will have to avoid the bad people.

It is good to have a separate wallet like hardware wallet or cold wallet that you can set aside for high part of your holding but also still be very careful of the malware. That is what I did and it has been helping me till today.

If you know that you'll be spending some coins it is best to separate that coin from your holding wallet probably a hardware wallets while the coins to be spent on short term can be kept in a non custodial wallets, or a an exchange which can be on a mobile phone that can be carried around to anywhere you're going to, meanwhile the hardware wallet shouldn't have the freewill of mobility.
And just as you have malwares are another dangerous thing to watch out for most especially when you're using a desktop wallet or a mobile wallet.

[ImGenius]

Although I don't use MacOS, I find it very annoying when I want to download something but Google shows many websites with same name which is why there is no way to understand which one is official and which one is not. The best method that always work for me which is search on YouTube then watch some influencers video, maximum time they will give original download link. It will always work for me