Malware developers have found an innovative way to bypass macOS security checks, exploiting a vulnerability that leaves users exposed to malicious software installations. A new strain of malware called CrashStealer has been discovered using a notarized dropper to evade Gatekeeper’s safeguards and install itself on unsuspecting Macs.
CrashStealer is a type of malware designed to steal sensitive information from infected devices, including login credentials, credit card numbers, and other personal data. The malicious software uses a sophisticated approach to infect Macs by exploiting the macOS notarization process, which is meant to verify the authenticity of downloaded apps. Notarized droppers are essentially apps that have been reviewed and approved by Apple’s notary service, but in this case, they’re being used as a tool for malware distribution.
The malware developers behind CrashStealer took advantage of a vulnerability in the macOS notarization process, which allowed them to create a notarized dropper that could bypass Gatekeeper’s checks. Gatekeeper is a security feature designed to ensure that only trusted apps can be installed on a Mac, but it appears that CrashStealer was able to circumvent this protection by using a legitimate app as a delivery mechanism.
The impact of this vulnerability extends beyond just individual users; organizations relying on macOS for their operations are also at risk. With the ability to install malware undetected, hackers can gain unauthorized access to sensitive data and disrupt business operations. The fact that CrashStealer was able to evade Gatekeeper’s checks suggests a level of sophistication among malware developers that may require Apple to review its security protocols.
The discovery of CrashStealer serves as a reminder that even the most secure operating systems are not immune to attack. As AI-powered tools become increasingly prevalent in cybersecurity, organizations must adapt their defenses to keep pace with emerging threats. One key takeaway from this incident is the importance of staying up-to-date on software patches and security updates. By keeping your macOS version current, you can reduce the risk of falling victim to malware like CrashStealer.
Source: The Hacker News — 2026-07-13