Fake Maccy Stealer

A new macOS malware campaign is impersonating the Maccy clipboard manager to deploy an infostealer that bypasses security via a deceptive Apple Script Editor lure. The malware disguises itself as a fake "Finder" process to harvest sensitive data, including browser credentials, Keychain entries, and even active clipboard contents. To evade detection by traditional security tools, the campaign utilizes "Login Items" for persistence rather than more commonly monitored launch agents.