A new Mac stealer targeting $10K+ crypto wallets

Reported 15 Apr 2026 by otx · Severity: medium

A sophisticated macOS stealer called notnullOSX emerged in March 2026, developed by threat actor alh1mik (formerly 0xFFF) who returned after a 2023 exit from underground forums. This Go-written modular stealer exclusively targets macOS users with cryptocurrency holdings exceeding