MEDIUMVulnerability
Global

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

·Source: The Hacker News

Updated:

Executive Summary

Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. The stealer, discovered by Jamf Threat Labs, is distributed as a compiled AppleScript (.scpt) file impersonating Maccy, a legitimate open-source clipboard manager. It has been codenamed PamStealer owing to its ability to

Analysis

Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a series of clever tricks to infect systems and siphon sensitive data. The stealer, discovered by Jamf Threat Labs, is distributed as a compiled AppleScript (.scpt) file impersonating Maccy, a legitimate open-source clipboard manager. It has been codenamed PamStealer owing to its ability to
Source Attribution

Originally published by The Hacker News on Jul 3, 2026.

Related Threats

MEDIUMVulnerabilityNEW

ToneTag launches voice-first bank assistant for Indian market

ToneTag, India’s deep-tech platform, today announced the launch of eKosha, a voice-first business assistant for merchants that enables banks to deliver a full range of merchant banking services directly at the merchant counter without requiring new infrastructure investment.

Finextra
MEDIUMVulnerabilityNEW

ISMG Editors: Signs of Russia in Jaguar Land Rover Probe

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ismg-editors-signs-russia-in-jaguar-land-rover-probe-image_small-2-a-32151.jpg" align=right hspace=4><b>Also: AI Export Controls Reshape Post-Quantum Debate, Grappling With AI Governance</b><br>In this week's ISMG Editors' Panel, four editors discussed new developments in the Jaguar Land Rover cyberattack probe, why export control

Bank Info Security
CRITICALVulnerabilityNEW

New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild

Citrix NetScaler appliances have been a constant target for attackers in recent years, most recently through an information leak vulnerability dubbed CitrixBleed 3, the latest in a series of NetScaler memory overreads going back to 2023. This week, Citrix patched yet another CitrixBleed-like vulnerability and there are signs of in-the-wild exploitation already. The new memory overread vulnerabilit

CVE-2026-8451CVE-2023-4966
CSO Online