Jamf: Fake Maccy clipboard app spreads new Mac password-stealing malware PamStealer

Odaily reports that Jamf Threat Labs has stated Mac users searching for the open-source clipboard manager Maccy are being targeted by a fake version of the app, which installs a new info-stealing malware based on Rust called PamStealer. This malware may steal user passwords and cryptocurrency wallet keys. The malware is distributed via lookalike websites containing a malicious AppleScript file, Maccy.scpt, and steals data after verifying the victim's login password using macOS Pluggable Authentication Modules. Jamf also indicated the discovery of ClickFix-type malware spread through X sponsored ads, with these ads promoting DynamicLake and redirecting users to dynamicmacisland[.]com, tricking them into opening Terminal and executing installation commands. Payload analysis shows this is a recent variant of Atomic MacSync Stealer. (Decrypt).