Analysis of PamStealer’s Intel Mac Build Reveals Credential Theft and Dual Persistence
Analysis of an in-the-wild Intel x86_64 PamStealer sample finds credential and browser-data theft, crypto clipboard substitution, dual persistence, Ethereum-based C2 resolution, and anti-analysis checks. Attribution to Russian/CIS-linked cybercriminals is moderate-conf