We created MacGuard, a tool you compile yourself to help protect against and scan for common macOS stealers, including: Atomic macOS Stealer, Poseidon, Odyssey, Banshee, Cuckoo, Cthulhu, and similar malware. These are among the most damaging threats targeting crypto users. They often attempt to maintain backdoor access, steal Keychain data, exfiltrate files and wallets, and replace binaries for common crypto tools such as Ledger, Trezor, and other wallet software. In some cases, the damage happens in under 3 seconds. Once the data is online, recovery is almost impossible, and victims are forced to rotate credentials, move funds, replace wallets, and rebuild their security setup. These stealers have become one of the most common attack vectors against crypto users, often spread through fake interviews, founder calls, malicious “meeting software,” or bundled inside free tools. Large file sizes can also help these payloads evade online malware scanners. MacGuard is free, public, and designed to support the crypto community. It scans files locally with no file-size limit. Security researchers are welcome to review the project and submit PRs to improve as it is just a quick response no one care about in the industry. GitHub: https://github.com/Factor420/MacGuard You can often spot these threats through heuristics rather than signatures. Common red flags include: The app asks for root access Someone insists you install software for a call instead of using Google Meet The binary is small, often around 200–250 KB The file comes from an unknown “free software” bundle The setup feels rushed or tied to an interview, investor call, or founder meeting Stay safe. There has been a major wave of macOS malware targeting crypto users.(TheKingfisher)