New Malware Steals Telegram Sessions and Wallet Data from Mac Users

A blockchain security firm, SlowMist, has discovered a new malware targeting Mac users. This malware steals Telegram account information, cryptocurrency wallet data, passwords, and recovery phrases. According to Cointelegraph on the 14th, the malware targets macOS and is quietly installed when users download files that appear to be legitimate apps. Once installed, it collects data from Apple Keychain, browser credentials, notes, and encrypted wallet data. Notably, it can steal active Telegram sessions, allowing access to chat rooms without a login code, which poses a significant risk of leaking exchange account and over-the-counter (OTC) information. The malware first collects stored information from the Mac and then sends it to the attacker, displaying a fake wallet window that resembles Ledger or Trezor to trick users into entering their recovery phrases. If the recovery phrase is compromised, control of the wallet is handed over to the hacker. SlowMist has identified the theft of Telegram sessions as the greatest risk, warning that a single compromised account can have far-reaching consequences. Experts recommend avoiding app installations from unofficial sources, not entering recovery phrases in pop-up windows, immediately logging out of suspicious Telegram sessions, and keeping macOS and security programs up to date.

Disclaimer: This content is provided for general branding and informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online events, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets or to use any services. Crypto assets are highly volatile and may result in loss. WEEX services and online events may not be available in all regions and are subject to applicable laws, regulations, and eligibility requirements. You are responsible for ensuring that your use of WEEX services complies with local laws and for carefully assessing the risks before participating in any crypto-related activities.