PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

Cybersecurity researchers have identified a new macOS information stealer called PamStealer. This malware is distributed as a compiled AppleScript file that disguises itself as Maccy, a legitimate open-source clipboard manager. PamStealer uses clever tactics to infect systems and steal sensitive data. The malware was discovered by Jamf Threat Labs. It is capable of stealing Mac login passwords, using fake Maccy sites and PAM checks to achieve this. PamStealer's name reflects its ability to steal this specific type of sensitive information.