{"id":240762,"date":"2026-07-14T00:37:09","date_gmt":"2026-07-14T05:37:09","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/07\/new-crashstealer-malware-poses-as-apple-crash-reporting-tool"},"modified":"2026-07-14T00:37:09","modified_gmt":"2026-07-14T05:37:09","slug":"new-crashstealer-malware-poses-as-apple-crash-reporting-tool","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/07\/new-crashstealer-malware-poses-as-apple-crash-reporting-tool","title":{"rendered":"New CrashStealer malware poses as Apple crash reporting tool"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/new-crashstealer-malware-poses-as-apple-crash-reporting-tool.jpg\"><\/a><\/p>\n<p>A new macOS information-stealing malware called CrashStealer pretends to be Apple\u2019s crash-reporting tool to steal credentials, keychain data, and crypto wallets.<\/p>\n<p>Malware researchers started tracking the malware in May, when it appeared to still be in development, but observed it being used in attacks in early July.<\/p>\n<p>CrashStealer has a typical infostealer capability set that seems to focus on password managers and more than 80 crypto wallet extensions.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A new macOS information-stealing malware called CrashStealer pretends to be Apple\u2019s crash-reporting tool to steal credentials, keychain data, and crypto wallets. Malware researchers started tracking the malware in May, when it appeared to still be in development, but observed it being used in attacks in early July. CrashStealer has a typical infostealer capability set that [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34],"tags":[],"class_list":["post-240762","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/240762","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=240762"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/240762\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=240762"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=240762"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=240762"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}