Fake Mac Clipboard App Delivers New Password-Stealing Malware

[_act_]

If this has been posted before since last week Thursday, you can let me know so that I can lock this topic.

It is about a malware, new Mac infostealer dubbed PamStealer, impersonating the open-source Maccy clipboard manager to steal passwords and more.

Maccy is a free macOS open source clipboard manager. It keeps a history of what that has been copied which you can searched for. It helps in quick reuse of text, images, files and other clipboard content instead of copying them again.

Mac users searching for the open-source clipboard manager Maccy are being targeted by a fake version of the app that installs a new Rust-based infostealer dubbed PamStealer, according to cybersecurity firm Jamf Threat Labs. If successful, the malware could steal users’ passwords and crypto wallet keys.

It is still the same old way, but some people will still fall into the scammers trap by downloading the fake app, thinking it is the legit app.


You can also read about the malware that is promoted by sponsored advertisement through the same link in the quote:

In an X post last week, the company said it was investigating a sponsored advertisement on X promoting DynamicLake that redirected users to dynamicmacisland[.]com, where they were instructed to open Terminal and execute an installation command.

“The advertisement was delivered through a verified X account, adding another layer of trust to the social engineering,” the firm wrote. “Analysis of the payload revealed a recent Atomic (MacSync) Stealer variant.”

[Chinesebaby]

It is still the same old way, but some people will still fall into the scammers trap by downloading the fake app, thinking it is the legit app.

Its actually sad with how the high rate of internet scam is actually getting rampant today, and it's just looking like the only way to staying safe from not falling victim to this is just to have a complete separate device that holds all your financial apps and crypto wallets and exchange, while also having a completely separate Gmail address. Because there is no how using a single device won't fall victim to this if these kinds of apps are been allowed to be launched on both IOS and Android mobile stores. So with this news, people do actually needs to be more security conscious than ever.

[PostQuantumBTC]

Its actually sad with how the high rate of internet scam is actually getting rampant today, and it's just looking like the only way to staying safe from not falling victim to this is just to have a complete separate device that holds all your financial apps and crypto wallets and exchange, while also having a completely separate Gmail address. Because there is no how using a single device won't fall victim to this if these kinds of apps are been allowed to be launched on both IOS and Android mobile stores. So with this news, people do actually needs to be more security conscious than ever.

It is true that hacks in crypto are more than before, but they were many before. If it is about malware it is very common before, you can see many threads on this forum about it some many years ago. I guess they are even born into crypto, I mean as crypto started existing, they also started existing. It is people that will have to avoid the bad people.

It is good to have a separate wallet like hardware wallet or cold wallet that you can set aside for high part of your holding but also still be very careful of the malware. That is what I did and it has been helping me till today.

[Emjay24]

It is still the same old way, but some people will still fall into the scammers trap by downloading the fake app, thinking it is the legit app.


You can also read about the malware that is promoted by sponsored advertisement through the same link in the quote:

On a first search with Google, you see these two results

both looks almost the same and you might click on the second site because it has a .com ending, but the official site is the first one https://maccy.app

If you visit the https://maccy.app, you'll see the warning at the top of the landing page

There is a provision to download the software there or an accurate redirect link to the original version on apple stores. It's quite unfortunate that a lot of people download apps blindly from the stores and that's a point of failure.

[348Judah]

The moment you landed on any application that is not the original intended one for you to use, they know that you are most likely to be attacked because they are going to take advantage of this against you, we are expected to always ensure that we landed at the right platform and make use of the official app and downloaded from the right source, any fake app will make use of we always have one or two things to phish on us, as their main intention was to attack and still our asset by diverse means being set up if we fall their trap.

[pawanjain]

If this has been posted before since last week Thursday, you can let me know so that I can lock this topic.

It is about a malware, new Mac infostealer dubbed PamStealer, impersonating the open-source Maccy clipboard manager to steal passwords and more.

Maccy is a free macOS open source clipboard manager. It keeps a history of what that has been copied which you can searched for. It helps in quick reuse of text, images, files and other clipboard content instead of copying them again.

Thanks for posting this. I have recently shifted from a windows to mac and still new to the mac OS.
This information is useful for me since it will keep me aware of staying away from such apps.
I haven't been a fan of clipboard managers anyway but at least I got to know that there are phishing apps for mac too.

[promise444c5]

Not a fan of clipboard.. I don’t know why people need to store as many as possible data  on clipboard just to carry it about every site they visit even sensitive data like passwords  .

Mac has a clipboard, but only one item at a time and it clears whenever you paste such item.

I haven't been a fan of clipboard managers anyway but at least I got to know that there are phishing apps for mac too.

Incase you’re considering it, go directly to their GitHub repo : https://github.com/p0deje/Maccy , you will find every necessary details and download options and sources .

Don’t trust your clipboard BTW

[AVE5]

It is still the same old way, but some people will still fall into the scammers trap by downloading the fake app, thinking it is the legit app.

Yes still the old ways of the online scammers attacking crypto user's in their various sites on targets to steal their funds which either happens through the clipboard malware or poisoning the user's on targets by wallet address poisoning where the users single handedly makes the mistakes from his end and send the funds to the scammers address.
This is why it's good to crosscheck wallet address from transaction history or better still, don't hold on to your past transaction history but copy the address newly from the original folder.
Hence, the Maccy has also warned that only maccy.app is their official site were their legitimate app can be downloaded. This follows after the conformation that a fake site is impersonating them to steal from the user's.