CrashStealer Mac malware uses a signed Werkbit installer and fake password prompt to steal Keychain data, browser credentials and cryptocurrency wallets.
https://www.foxnews.com/tech/crashstealer-mac-malware-steals-passwords-wallets
https://www.foxnews.com/tech/crashstealer-mac-malware-steals-passwords-wallets