SlowMist Finds Dangerous Mac Malware That Target Crypto Users

Apple Mac users are no longer safe from crypto hackers. Blockchain security firm SlowMist has discovered a new malware that can steal Telegram accounts, crypto wallet data, passwords, and even recovery phrases.

The malware quietly targets macOS users and can give hackers full access to their digital assets.

Here’s the detailed report on how it was done by the hacker. So, read it to avoid getting hacked.

How the New Mac Malware Targets Crypto Users

According to SlowMist, the newly discovered malware is designed specifically for macOS devices. Once installed, it quietly collects sensitive information stored on the computer without alerting the victim.

The malware can steal data, including

SlowMist Finds Dangerous Mac Malware That Target Crypto Users

Telegram login sessions
Saved passwords
Apple Keychain data
Browser credentials
Notes stored on the Mac
Encrypted crypto wallet databases

This means anyone who stores passwords, crypto wallets, or sensitive information on a Mac could become a target.

How Hackers Steal Crypto Using This Malware

SlowMist explained that the attack happens in several steps.

Step one: A victim downloads or installs a malicious file disguised as a normal application.
Step two: The malware secretly searches the Mac for Telegram sessions, browser passwords, Apple Keychain data, Notes, and encrypted wallet files.
Step three: The stolen data is sent to the attacker, who can use the Telegram session without needing a login code.
Step four: The malware displays fake Ledger or Trezor wallet windows that look almost identical to the real apps.
Step five: When users enter their recovery phrase, it is immediately sent to the attacker, giving hackers complete control of the wallet.

How Telegram Users Face a Bigger Risk

The biggest concern is coming from the Telegram session theft. Because the malware steals active Telegram sessions instead of passwords, hackers can instantly access private chats without asking for verification codes.

Many crypto traders use Telegram for exchange accounts, OTC deals, and private investment groups, making these accounts highly valuable targets.

How Mac Users Can Stay Safe?

SlowMist recommends several steps to reduce the risk:

Download apps only from trusted sources.
Never enter your recovery phrase into pop-up wallet windows.
Keep recovery phrases offline.
Use hardware wallets carefully and verify every wallet prompt.
Update macOS and security software regularly.
Log out of Telegram sessions you do not recognize.

The security firm says even experienced crypto users can become victims if they trust fake wallet windows or install unknown software, making extra caution essential.

Was this writing helpful?

Share this insight with your network!

Story Ends Here

Trust with CoinPedia:

CoinPedia has been delivering accurate and timely cryptocurrency and blockchain updates since 2017. All content is created by our expert panel of analysts and journalists, following strict Editorial Guidelines based on E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness). Every article is fact-checked against reputable sources to ensure accuracy, transparency, and reliability. Our review policy guarantees unbiased evaluations when recommending exchanges, platforms, or tools. We strive to provide timely updates about everything crypto & blockchain, right from startups to industry majors.

Investment Disclaimer:

All opinions and insights shared represent the author’s own views on current market conditions. Please do your own research before making investment decisions. Neither the writer nor the publication assumes responsibility for your financial choices.