Hackers Turn Mac Password Stealer Into RAT That Survives Reboots and Executes Remote Commands
The Icarus macOS stealer, marketed as ICMacOS, has moved beyond smash-and-grab theft. Its latest version installs persistence, keeps a live channel open to its operators, and executes commands sent from a remote server. SOCRadar identified ICMacOS in September 2026 and found two variants. Version 1 focuses on core theft, targeting browser credentials, password manager databases, […] The post Hackers Turn Mac Password Stealer Into RAT That Survives Reboots and Executes Remote Commands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
Continue on GBHackers ↗ ‹ All news Get the newsletter
The summary and image come from GBHackers; the image is shown from their website.