Woofun AI reports that SlowMist has identified a targeted malware campaign affecting MacOS users, designed to steal cryptographic credentials and compromise Telegram accounts. The attack vector exploits the local trust layer by combining direct credential theft with phishing infrastructure, enabling session hijacking that circumvents standard login alert mechanisms. This method allows attackers to bypass security notifications, granting unauthorized access to linked cryptocurrency wallets and messaging platforms without triggering immediate user awareness.