New FrigidStealer Malware Spreads Through Fake Browser Updates on Macs

New FrigidStealer Malware Spreads Through Fake Browser Updates on Macs is easier to approach with a clear overview and reliable steps. This guide organizes the essential information, highlights practical details, and explains what to check along the way.

New FrigidStealer Malware Spreads Through Fake Browser Updates

A new malware strain, FrigidStealer, was recently discovered by Proofpoint and highlighted by AppleInsider.

This malware is designed to steal information from users' Macs. Using compromised websites that appear legitimate, criminals will redirect you to a fake browser update page. As you can see in the image, the pages look legitimate at first glance.

The DMG file will download to your Mac if you click the Update button. The installation instructions also look very official—when you follow them, they will bypass Gatekeeper, which is a Mac security feature that warns you that an app is unsigned and untrusted.

The final step of the 'installation' requires you to enter your Mac password. Proofpoint explains what happens after execution:

Once executed, FrigidStealer uses Apple and osascript script files to prompt the user for their password, then collects data including browser cookies, files with extensions related to password documents or cryptocurrencies from the victim's Desktop and Documents folders, and any Apple Notes the user has created.

All that data is then sent to another compromised website.

Mac Users Still Need to Stay Up to Date on Security

One of the biggest draws of Apple products, including Macs, is their focus on security. But as this social engineering campaign shows, bad actors can sometimes create a believable scenario that can fool someone.

You have several ways you can protect yourself from this very scary malware. First, be careful about the files you download from online sources. It can sometimes be bypassed, like FrigidStealer while Gatekeeper is a great feature of Macs. There are a few quick websites that will tell you whether a link is safe before you download it if you're worried.

Another way to stay protected at all times is to use antivirus software. Instead of spending money, you can find some great free antivirus options for your Mac.

Final Thoughts

The most reliable way to handle new FrigidStealer malware spreads through fake browser updates on macs is to follow the process in order, verify each important setting, and test the result before moving on. Use the guidance above as a practical reference, then adjust the details for your device, software version, or specific goal.