A dangerous new malware campaign is actively targeting Mac users by masquerading as a trusted clipboard manager utility. Security researchers have identified the threat, dubbed PamStealer, which mimics a legitimate app to trick unsuspecting victims.
How the Attack Works
Attackers create fake websites that closely resemble the official Maccy clipboard app. Users who download the installer from these fraudulent sites are prompted to run a malicious package. Once opened, a hidden AppleScript executes and downloads the PamStealer malware onto the Mac.
Why It’s Dangerous
PamStealer attempts to verify the user’s Mac login password and can steal sensitive information, including saved credentials, browsing data, and other personal files. The malware is designed to exfiltrate data without raising immediate suspicion.
Who Is at Risk?
Any Mac user who downloads the Maccy app from unofficial websites or untrusted sources is at risk. The campaign primarily targets those searching for clipboard management tools and landing on fake, search-optimized pages.
How to Stay Safe
- Only download apps from official developer websites or the Mac App Store.
- Avoid clicking on unknown download links or ads for software.
- Be wary of unexpected password prompts, unfamiliar installer files, and suspicious website layouts.
- Keep macOS updated—Apple recently added protections in recent macOS updates to help reduce copy-and-paste and social engineering attacks.
Cybersecurity experts urge users to remain vigilant and verify the authenticity of any software before installation. If you have already downloaded a clipboard manager from a suspicious source, run a security scan and change your login credentials immediately.