FrigidStealer Strikes: Beware of Fake Browser Updates on MacOS!

FrigidStealer malware is targeting macOS users outside North America, pretending to be a browser update. Distributed by cybercriminal group TA2727, it’s a master of disguise, asking for passwords, then pilfering browser cookies, passwords, and cryptocurrency details. Proofpoint warns: if a website tells you to update your browser, it might just be a digital pickpocket!

Hot Take:

Mac users, you thought you were safe in your turtleneck sweaters and minimalist workspaces, but FrigidStealer is here to shatter your illusion of invincibility. Turns out, your biggest enemy isn’t that smug Windows user at the office—it’s a sneaky piece of malware disguised as a browser update. Time to swap those organic snacks for some cybersecurity awareness!

Key Points:

  • FrigidStealer targets macOS users, disguised as a browser update.
  • Written in Go, it harvests browser cookies, passwords, and cryptocurrency data.
  • Distributed by cybercriminal group TA2727, focusing on users outside North America.
  • Utilizes a fake update page to trick users into bypassing Apple’s Gatekeeper.
  • Linked to TA2726, known for traffic distribution to various malware campaigns.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here