CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

CrashStealer exploits the trust Apple's notarization process is meant to provide by using a legitimately signed and notarized dropper to slip past Gatekeeper — macOS's first line of defense against malicious software. This represents a supply-chain trust abuse scenario where the integrity verification mechanism itself becomes a vector for deception. Once installed, the malware aggressively harvests sensitive data from browsers, crypto wallets, password managers, and the system keychain, then exfiltrates it encrypted. This matters because users and security tools that rely solely on Apple's notarization as a trust signal are left with a critical blind spot, and the breadth of credential harvesting can lead to cascading account compromises across personal and financial systems.