New Malware Targets Crypto Wallets Across macOS, Windows & Linux

[ed]

A newly discovered malware, ModStealer, is actively targeting crypto wallets and browser extensions on macOS, Windows, and Linux.

Found by Apple security firm Mosyle, the malware:

Steals private keys, certificates, and wallet credentials

Hijacks data from browser-based wallets (Safari, Chrome, Brave, etc.)

Remains persistent by abusing background agent systems

Operated from servers routed through Germany/Finland

Key risk: ModStealer went undetected by major antivirus engines for nearly a month, leaving many users exposed.