New ShadowVault Infostealer Targets Mac Users
Cyber-criminals have developed a vicious new infostealer malware which they are trying to use to exploit vulnerable Macs in order to take passwords, credit card info and other private information.
Guardz, a cybersecurity company, initially detected the ShadowVault malware on a dark web page often visited by hackers searching for malicious software. They noted in a blog post that the malware functions silently in the background of infected Macs to acquire login IDs, financial information, and other personal data.
Besides the built-in MacOS password manager Keychain, ShadowVault can also extract passwords, cookies, credit card info, cryptocurrency wallet data and more from various Chromium-based browsers such as Chrome, Edge, Brave, Vivaldi and Opera. The malware is even capable of recovering potentially sensitive files on compromised Macs.
The perpetrators have apparently moved away from their usual target, Windows computers, to Macs since these are more likely to possess greater financial assets. Previously, Macs were supposedly more secure than Windows PCs due to the lack of malware built for Apple devices.
Recently, bad actors have been porting Dridex and other viruses intended for Windows to macOS. Mac users should no longer take it for granted that they are safe from malware because they are in the Apple environment instead of Microsoft's.
How Can You Protect Your Mac from Potential Malware?
Keeping your Mac up to date with the latest security updates and software is one of the best ways to keep it protected from potential malware. Make sure you are regularly checking for updates and installing any recommended patches and security fixes as soon as they become available.
It is also important to use a reputable antivirus program that can detect and remove known threats before they can cause damage. Additionally, be sure to only download software from trusted websites, and be wary of clicking on links or files sent via email. Finally, consider using a Virtual Private Network (VPN) to stay safe while browsing online.
