Baby’s first malware

Source: tildes.net
22 points by paris 17 hours ago on tildes | 5 comments

I have been so lucky, so careful, and yet today I realised I have been compromised: my mac was compromised (i assume) by a shoddy version of Maccy (a clipboard manager!!!) which installed something called PamStealer on my computer.

What twigged me to it was a very very strange pop up notification, telling me Finder had lost access to Files, with a prompted button to grant “Finder” full disk access. I’ve used Macs for more than thirty years (twenty years with any real zeal) and the notification gave me pause bc it simply did not make sense. I didn’t give the access and instead searched for the exact wording of the popup, and the first result was a Apple community post explaining which malware this was. Further searches gave me more info.

There went the rest of my day, attempting to purge the machine without a clean install (which, miasmatically, I may still do). I think I’m clean now, but fucking hell.