🚨 New FrigidStealer Malware Targets macOS Users! 🚨

Cybercriminals are deploying a new macOS info-stealer called FrigidStealer via fake browser update pop-ups! 🛑

🕵️‍♂️ Who’s Behind It?
🔹 TA2727 – A threat actor using fake updates to spread malware 🎭
🔹 Works with TA2726 (malicious traffic distributor) and TA569 (SocGholish malware)
🔹 Active since September 2022, targeting Windows, Android & now macOS

⚠️ How the Attack Works:
🔹 Victims visit a compromised website 📌
🔹 Fake Chrome/Safari update appears 🔄
🔹 Users unknowingly install FrigidStealer 🖥️
🔹 Malware harvests passwords, browser data, Apple Notes & crypto wallet info 💸

🔍 Technical Details:
🔹 Written in Go, using WailsIO project for legitimacy 🎭
🔹 Bypasses Gatekeeper if users manually approve execution
🔹 Uses AppleScript to trick users into entering system passwords 🔑

💡 Stay Safe!
✅ NEVER download browser updates from pop-ups ❌
✅ Update browsers only from official sources 🔒
✅ Use strong endpoint security & monitoring 🔍


#CyberSecurity #macOSMalware #FrigidStealer #FakeUpdates #ThreatIntel