A new form of malware is targeting macOS users by impersonating Apple’s built-in crash-reporting component to trick victims into installing a password-stealing payload. As detailed by Jamf Threat Labs, CrashStealer is a macOS infostealer designed to harvest login details, cryptocurrency wallets and any other data stored on the system or in the browser. Written in C++, CrashStealer was first detected in early July. It is delivered through a disk image that impersonates Apple’s built-in crash-reporting component. The initial way the CrashStealer attack chain begins has not been detailed, but during at least the second stage of the attack, the user is directed to a signed and Apple-notarized dropper, distributed as a disk image named "Werkbit Setup.” Crucially, this disk image is signed with…