XCSSET Malware Steals Chrome Passwords And Telegram Accounts, Targets macOS Developers

Security researchers have reported that constantly evolving macOS malware XCSSET steals Google Chrome passwords and Telegram accounts by infecting legitimate Xcode projects. One of the targeted apps is Telegram instant messaging software. Malware creates the archive “telegram.applescript” for the “keepcoder.Telegram” folder under the Group Containers directory, collecting the Telegram folder allows the hackers to log into the messaging app as the legitimate owner of the account. Read more...