A macOS Infostealer Targeting Crypto Wallets, Browsers, and Apple Notes

July 26, 2026

A full technical analysis of a xorshift32-obfuscated macOS trojan with self-destruct capabilities