Mac users are being alerted to a new malware strain called "Cthulhu Stealer," which targets popular crypto wallets like MetaMask, Coinbase, and Binance on macOS operating systems. Disguised as legitimate software, such as CleanMyMac and Adobe GenP, the malware appears as an Apple disk image (DMG). When executed, it prompts users for their system password and then the password for their Ethereum wallet, MetaMask. The malware steals credentials and wallet information, storing the data in text files, and also collects system details like IP address and OS version. Cthulhu Stealer is suspected to be a variant of the earlier Atomic Stealer malware, with its creators allegedly renting it out to affiliates for $500 per month. The malware's activity highlights the growing trend of macOS-targeted threats, despite the operating system's reputation for security.