A newly-spotted security threat called ShadowVault works in the background on macOS to access logins, banking details, and more personal data.
Macs have traditionally been less targeted by malware developers in part because of the security in macOS, and partly because it’s presented a smaller target than Windows. It’s still the case that Macs have fewer malware issues than PCs, but also it’s being targeted by different types of security threats.
Now according to Guardz Cyber Intelligence Research (CIR), a new specific threat to macOS has been uncovered. CIR claims to have used “sophisticated covert operations” in order to identify ShadowVault while it was still being developed.
It’s not clear whether ShadowVault has been seen in active use, nor how it is intended to be delivered once in the wild. Since it runs in the background on Macs, though, users presumably have to be tricked into downloading and running it.