- Telegram login sessions
- Saved passwords
- Apple Keychain data
- Browser credentials
- Notes stored on the Mac
- Encrypted crypto wallet databases
This means anyone who stores passwords, crypto wallets, or sensitive information on a Mac could become a target.
How Hackers Steal Crypto Using This Malware
SlowMist explained that the attack happens in several steps.
- Step one: A victim downloads or installs a malicious file disguised as a normal application.
- Step two: The malware secretly searches the Mac for Telegram sessions, browser passwords, Apple Keychain data, Notes, and encrypted wallet files.
- Step three: The stolen data is sent to the attacker, who can use the Telegram session without needing a login code.
- Step four: The malware displays fake Ledger or Trezor wallet windows that look almost identical to the real apps.
- Step five: When users enter their recovery phrase, it is immediately sent to the attacker, giving hackers complete control of the wallet.
How Telegram Users Face a Bigger Risk
The biggest concern is coming from the Telegram session theft. Because the malware steals active Telegram sessions instead of passwords, hackers can instantly access private chats without asking for verification codes.
Many crypto traders use Telegram for exchange accounts, OTC deals, and private investment groups, making these accounts highly valuable targets.
How Mac Users Can Stay Safe?
SlowMist recommends several steps to reduce the risk:
- Download apps only from trusted sources.
- Never enter your recovery phrase into pop-up wallet windows.
- Keep recovery phrases offline.
- Use hardware wallets carefully and verify every wallet prompt.
- Update macOS and security software regularly.
- Log out of Telegram sessions you do not recognize.
The security firm says even experienced crypto users can become victims if they trust fake wallet windows or install unknown software, making extra caution essential.
Was this writing helpful?
Story Ends Here
Trust with CoinPedia:
CoinPedia has been delivering accurate and timely cryptocurrency and blockchain updates since 2017. All content is created by our expert panel of analysts and journalists, following strict Editorial Guidelines based on E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness). Every article is fact-checked against reputable sources to ensure accuracy, transparency, and reliability. Our review policy guarantees unbiased evaluations when recommending exchanges, platforms, or tools. We strive to provide timely updates about everything crypto & blockchain, right from startups to industry majors.
Investment Disclaimer:
All opinions and insights shared represent the author’s own views on current market conditions. Please do your own research before making investment decisions. Neither the writer nor the publication assumes responsibility for your financial choices.
Sponsored and Advertisements:
Sponsored content and affiliate links may appear on our site. Advertisements are marked clearly, and our editorial content remains entirely independent from our ad partners.
Read the Next News
