Jamf Threat Labs

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

PamStealer is a newly identified macOS information-stealing malware distributed via malicious AppleScript files masquerading as the legitimate Maccy clipboard utility, enabling credential theft.