---
title: "PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords — Stuff That Spins"
description: "Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. The stealer, discovered by Jamf Threat Labs, is distributed as a compiled AppleScript (.scpt) file impersonating Maccy, a legi…"
	canonical: "https://stuffthatspins.com/spin/pamstealer-uses-fake-maccy-sites-and-pam-checks-to-steal-mac-login-passwords"
html: "https://stuffthatspins.com/spin/pamstealer-uses-fake-maccy-sites-and-pam-checks-to-steal-mac-login-passwords"
json: "https://stuffthatspins.com/spin/pamstealer-uses-fake-maccy-sites-and-pam-checks-to-steal-mac-login-passwords.json"
markdown: "https://stuffthatspins.com/spin/pamstealer-uses-fake-maccy-sites-and-pam-checks-to-steal-mac-login-passwords.md"
keywords: ["SpinGraph", "spin analysis", "GEO"]
date: "2026-07-03T08:03:37+00:00"
modified: "2026-07-05T04:42:14.213589+00:00"
json_ld: |
  {"@context":"https://schema.org","@graph":[{"@type":"NewsArticle","@id":"https://stuffthatspins.com/spin/pamstealer-uses-fake-maccy-sites-and-pam-checks-to-steal-mac-login-passwords#article","headline":"PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords","description":"Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. The stealer, discovered by Jamf Threat Labs, is distributed as a compiled AppleScript (.scpt) file impersonating Maccy, a legi…","datePublished":"2026-07-03T08:03:37+00:00","dateModified":"2026-07-05T04:42:14.213589+00:00","url":"https://stuffthatspins.com/spin/pamstealer-uses-fake-maccy-sites-and-pam-checks-to-steal-mac-login-passwords","mainEntityOfPage":{"@type":"WebPage","@id":"https://stuffthatspins.com/spin/pamstealer-uses-fake-maccy-sites-and-pam-checks-to-steal-mac-login-passwords"},"isAccessibleForFree":true,"inLanguage":"en-US","articleSection":"cybersecurity","author":{"@type":"Organization","name":"Stuff That Spins"},"publisher":{"@id":"https://stuffthatspins.com/#organization"},"citation":"https://thehackernews.com/2026/07/pamstealer-uses-fake-maccy-sites-and.html","about":[],"mentions":[]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Stuff That Spins","item":"https://stuffthatspins.com/"},{"@type":"ListItem","position":2,"name":"PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords","item":"https://stuffthatspins.com/spin/pamstealer-uses-fake-maccy-sites-and-pam-checks-to-steal-mac-login-passwords"}]}]}
---

# PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

**Source:** Unknown  
**Published:** July 3, 2026  
**Original:** https://thehackernews.com/2026/07/pamstealer-uses-fake-maccy-sites-and.html  

---
*HTML version: https://stuffthatspins.com/spin/pamstealer-uses-fake-maccy-sites-and-pam-checks-to-steal-mac-login-passwords*