FrigidStealerMalware
According to Proofpoint, FrigidStealer FrigidStealer uses Apple script files and osascript to prompt the user to enter their password, and then to gather data including browser cookies, files with extensions relevant to password material or cryptocurrency from the victim’s Desktop and Documents folders, and any Apple Notes the user has created.From MISP Galaxy
Last reported 16 months ago, by Huntress1 report
ATT&CK techniques
3 techniques · each with the sentence it comes from- T1036.012Browser Fingerprint
“…zed in 2023) was invitation-only, and it included an interface that allowed cybercriminals to browse stolen data by location, IP, browser fingerprint, or otherwise.”
- T1218.002Control Panel
“…ration targeting Lumma Stealer, which disrupted its technical infrastructure with federal authorities seizing its infrastructure and control panel.”
- T1657Financial Theft
“…ms’ email and browser credentials and credit card data, modern infostealers target a broad set of information aimed at identity and financial theft, and they can enable further data harvesting.”
What the reports say
1 report, newest first · the exact sentence from each-
Infostealers Crash Course: A Tradecraft Tuesday Recap“FrigidStealer: Targets Safari and Chrome credentials, Apple Notes documents, and crypto wallet data”
Thanks — we review every report.