PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
PamStealer now uses live key exchange to block static payload recovery and is delivered through a fake Wavel macOS download.
More info