New macOS ‘ShadowVault’ malware steals passwords, cryptography and credit card data

[ad_1]

Cybersecurity firm Guardz has announced that it has discovered new malware designed to “steal sensitive data” in the background on macOS. Dubbed “ShadowVault,” the malware, according to a forum post uncovered by Guardz, can grab usernames and passwords, stored credit card information, encrypted wallet data, and more.

Guardz discovered ShadowVault through the XSS forum on the dark web, where it was offered to anyone willing to pay $500 a month to rent the malware. The development of ShadowVault is part of a growing trend of malware as a service (sometimes referred to as MaaS) against macOS. In April, Cyble Research and Intelligence Labs discovered AMOS, while in March, Uptycs discovered MacStealer, both available to bad actors for a fee.

The CVE.report database that tracks vulnerabilities and exposures does not appear to have an entry for ShadowVault, and Apple has not commented on the malware. Coincidentally, Apple released an emergency Rapid Security Response update for macOS 13.4.1 (as well as iOS 16.5.1 and iPadOS 16.5.1) on Monday, but the update was pulled after numerous reports said that it was causing web applications to fail. . However, the update’s security notes seem to indicate that the daily flaw is unrelated to ShadowVault.

How to protect yourself from malware

Apple has protections in place in macOS and the company releases security patches through OS updates, so it’s important to install them when they become available. If Apple rolls back an update, as it did with macOS 13.4.1(a), the company will re-release it as soon as it’s properly reviewed with fixes.

When downloading software, obtain it from trusted sources, such as the App Store (which performs security checks of its software) or directly from the developer. Macworld has several guides to help you, including a guide on whether or not you need antivirus software, a list of Mac viruses, malware, and Trojans, and a comparison of Mac security software.

[ad_2]