CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Researchers have identified a new macOS malware called CrashStealer, which can steal sensitive data from compromised systems. CrashStealer is written in native C++, distinguishing it from other information stealers that use AppleScript droppers or Objective-C-based wrappers. The malware uses a notarized dropper to bypass Gatekeeper checks, allowing it to install on macOS devices. CrashStealer validates the victim's login password locally before proceeding with its malicious activities.