Security· ★★★· bearish·

New macOS Stealer 'Sonoma' Targets Crypto Wallets via Fake Zoom and Brave Downloads

  • —Sonoma is a Swift infostealer that scoops passwords, browser data and crypto wallets
  • —It spreads via fake DMG/ZIP installers for Zoom, StreamYard, Slack and Brave Talk
  • —The launcher strips Gatekeeper quarantine with xattr -dr com.apple.quarantine before staging a second payload
  • —Sonoma detections have already appeared on Macs in Spain and Japan
Why it matters: The stealer specifically targets crypto wallets and Web3 tools, making real fund loss a risk for macOS users.
Source: HackerNoon (crypto tag)
More on this
Security · 19:17
Crypto App Promised to Turn $1.1M Into $20M — Investor Now Fears It Was a Scam
 Security · 19:17
Upbit flags EGLD after MultiversX mainnet exploit attempt
 Security · 19:00
VanEck: Bitcoin has technical solutions to the quantum threat