📝 Show notes
CyberAware Daily — 2026-09-26
- Weekend short: PamStealer macOS malware gets live attacker communication and multiple persistence methods
- Who's affected: mainly targeted, corporate and high-value users, not the average home Mac
- The main way in: fake 'fix your browser' pages that tell you to paste a command into Terminal
- UK action: update macOS, change key passwords from another device if you think you've run something
- US soldier sentenced to 70 months for extorting phone networks: extortion carries real prison time
- Dark web watch: another ransomware service starting up with an active leak site, business focus, not home users
- This weekend's one tip: never paste a command into your Mac because a website told you to
More at https://cyberawareuk.co.uk
📄 Full transcript
It's Saturday, so we're keeping this one short.
One threat worth knowing about, and one tip you can actually use this weekend.
And I like the sound of that.
What's the threat?
There's a piece of malware aimed at Macs doing the rounds, called PAM Steeler.
Researchers say it's been updated with live two-way communication to the attacker and a few different ways of staying put on the machine.
So who actually needs to worry here?
Is this your average family Mac in the front room?
Not really.
What we're seeing with this one is targeted use, more corporate and high value than random.
The vendors rate it a real concern, but it isn't spreading like a virus through the general public.
That's reassuring.
How would it get onto a Mac in the first place?
Same old story as most Mac malware.
Something you didn't ask for gets installed, or you're talked into running a command someone sent you.
The classic one is a pop-up saying your browser needs a quick fix.
The copy and paste thing.
That's the one.
A page tells you to open a terminal and paste in a string of text to fix a problem that doesn't exist.
If you do that, you've handed over the keys.
So the tip for Mac owners is simply never paste in commands from a website or a pop-up.
That's it.
No website, no pop-up, and no message from someone claiming to be support will ever need you to paste a command into your Mac.
If you see that, close the window.
What if someone's already done it, or they're worried they have?
Then don't panic, just act.
Update macOS, change your main passwords from a different device, and give the machine a once-over, or get someone you trust to look at it.
Fair.
And there's something else in the news this week worth a quick mention, isn't there?
A US soldier got 70 months in prison for extortion against phone networks.
Yes, and the lesson from that one is simple.
Extortion and blackmail carry real prison time, and the people doing it got caught.
If you're ever on the receiving end of a threat like that, you report it.
You don't pay.
And on the dark web side, our monitoring picked up another ransomware operation, getting itself set up, with a leak site already running.
Again, so listeners know where they stand, these outfits mostly aim at businesses and organizations, not households.
You don't need to do anything special about that one.
Right?
So the takeaway for this weekend, in one line.
Never paste a command into your Mac because a website or a pop-up told you to.
Not even if it looks official.
That's it, and we'll see you Monday.
permeate your Mac because to make sure to make sure to make sure the perfect conditions you have allеч
so on and 길 and you'll bedan.
Let's see you on YouTube.
Bye for now.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.
Right.
Bye.
Bye.
Bye.
Bye.
Bye.
Bye.