Woofun AI reports that security researchers have identified a MacOS information-stealing malware specifically targeting cryptocurrency users. The malicious software is capable of hijacking Telegram Desktop sessions, extracting passwords, and stealing wallet databases to facilitate unauthorized account control and digital asset theft. Affected applications include Exodus, Atomic, Electrum, Wasabi, and Monero.

Security experts advise users with potentially compromised devices to immediately classify them as "untrusted devices" and terminate all active Telegram sessions. Users are instructed to change their Telegram two-factor authentication and desktop app passwords, avoid entering seed phrases or private keys on the infected machine, and generate new wallets to migrate assets.