KeySteal
- First seen
- 2019-08-01 00:00:00
- Malware type
- credential-stealer
- Profile updated
- 2026-07-07 14:36:12
Context
According to SentinelOne, KeySteal targets files with the .keychain and keychain-db file extensions in the following locations.
Reports & references
- sentinelone.com — Session Cookies Keychains Ssh Keys And More 7 Kinds Of Data Malware Steals From Macos Users (report)
- malpedia.caad.fkie.fraunhofer.de — Osx.Keysteal (report)