Mac users warned over malware ‘Cthulhu’ that steals crypto wallets

Cado Security has warned Mac users about "Cthulhu Stealer," a new macOS malware strain that steals personal information and targets cryptocurrency wallets. The malware disguises itself as legitimate software such as CleanMyMac and Adobe GenP, prompts users for their password, then presents a second prompt for the MetaMask wallet password. Cado researcher Tara Gould said the malware is very similar to Atomic Stealer, which was identified in 2023, and that its developer "probably took Atomic Stealer and modified the code." The malware was rented to affiliates for $500 per month via Telegram, but its operators are reportedly no longer active following payment disputes.