Odyssey Stealer, a rebranded version of Poseidon Stealer, targets macOS users through the Clickfix technique—tricking victims into copy-pasting malicious scripts into their terminal.
 
With capabilities to steal hardware details, keychains, browser cookies, crypto wallets, and plugins, the stolen data is sent to the stealer's hosted infrastructure. During our analysis, we observed it creating a directory in the /tmp folder named "lovemrtrump."
 
Interestingly, earlier versions avoided CIS countries, and this trend may still continue. Stay vigilant!

Link to the Research Report: https://www.cyfirma.com/research/odyssey-stealer-the-rebrand-of-poseidon-stealer/
 
#CYFIRMA #CYFIRMAresearch #ExternalThreatLandscapeManagement #ETLM #lovemrtrump

https://www.cyfirma.com/