Apple Mac users are facing a new security threat from malware known as "Cthulhu Stealer," which is designed to compromise personal data and cryptocurrency wallets.
On August 22, Cado Security reported that while macOS has traditionally been seen as secure, malware targeting this platform has been increasing. Cthulhu Stealer, disguised as popular software like CleanMyMac or Adobe GenP, is distributed through Apple disk images (DMGs).
When users open these files, the malware uses macOS tools to prompt for the user’s system password and then requests credentials for Ethereum wallets such as MetaMask, along with other crypto wallets like Coinbase and Binance.
The stolen information is stored in text files, and the malware also gathers additional system details such as IP address. Tara Gould from Cado Security noted that Cthulhu Stealer shares similarities with the Atomic Stealer malware from 2023, suggesting it might be a modified version.
The malware was previously available for rent via Telegram for $500 a month, but disputes have reportedly halted its distribution. Additionally, on August 23, Cointelegraph reported that another malware, AMOS, now has the ability to replicate Ledger Live software.
The U.S. Department of Justice has sentenced Dwayne Golden, 57, of Pennsylvania to 97 months in prison for orchestrating a fraudulent crypto investment scheme that stole over $40 million from investors.
The first half of 2025 has become the most damaging six-month period in crypto history, with over $2.1 billion stolen across 75+ separate incidents, according to new data.
A new breed of cyber-attack is sweeping through crypto media, exploiting site pop-ups and wallet-connect prompts instead of smart-contract bugs.
CoinMarketCap, one of the most widely used crypto data tracking platforms, is reportedly facing a front-end security breach, with multiple users encountering a suspicious prompt to verify their wallets.