Moonlock Lab: macOS Odyssey information-stealing Trojan targets more than 16 crypto applications and about 300 crypto extension IDs

robot
Abstract generation in progress
According to Moonlock Lab monitoring, the Odyssey infostealer malware on macOS has recently surged, affecting over 100 countries. This variant can steal passwords, cookies, and autofill data from browsers including Chrome, Brave, Edge, and Firefox; steal wallet files from more than 16 crypto applications such as Electrum, Exodus, Ledger Live, Trezor Suite, Bitcoin/LTC/Dash Core, and Monero, and targets approximately 300 crypto extension IDs. It can also obtain SSH keys, cloud service configurations, Keychain databases, Telegram/Discord data, zsh history, and local passwords. Moonlock Lab states that the malware also installs a persistent LaunchDaemon and replaces Ledger, Trezor, and Exodus applications with trojanized "drainer" versions, reminding users to verify the source of applications before installation.
BTC-0.01%
LTC0.45%
DASH-0.14%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 4
  • 1
  • Share
Comment
Add a comment
Add a comment
AlmondMilkLiquidator
· 1h ago
300 extension IDs... The plugins installed in my browser might as well be completely stripped, uninstalling them overnight.
View OriginalReply0
SecondaryMarketDeserter
· 3h ago
The most insidious trick is replacing the genuine app; ordinary people simply can’t detect it and can only wait for an official announcement.
View OriginalReply0
MevHasMeCompletelyConfused.
· 3h ago
Is macOS no longer safe? This trojan can even drain the Keychain—the moat of Apple's ecosystem has been breached.
View OriginalReply0
GateUser-0c86a4c9
· 3h ago
Ledger users are trembling—going forward, you’ll need to verify the hash before downloading a wallet.
View OriginalReply0
  • Pinned