Klue Security Incident and Its Impact on Recorded Future

CrashStealer is a sophisticated, native C++ macOS infostealer that masquerades as Apple's crash reporter, leveraging a signed and notarized dropper to bypass defenses, harvests extensive credentials and wallet data, encrypts it with AES-GCM, and exfiltrates the loot to a remote C2, all while employing advanced anti-analysis techniques and persistent Apple impersonation.