The exploit is designed to deceive Bitcoin and Exodus wallet users into unwittingly downloading a fraudulent version of the software. Kaspersky mentioned that the malware, distributed through pirated applications, is distinctive in its focus on compromising wallet applications. Unlike typical proxy trojans or remote control software, this malware stands out in two ways. First, it utilizes DNS records to deliver a malicious Python script. Second, it replaces a wallet application with its infected version. This allows the malware to steal the secret phrase to access cryptocurrency stored in the compromised wallets.
Source: Wayne Jones, 2024-01-28; https://cryptopotato.com/mac-users-beware-kaspersky-alerts-about-a-malicious-exploit-targeting-your-crypto-wallets/