Scattered Spider hackers sentenced, hardware wallet attacks, and other cybersecurity developments Weekly recap of major cybersecurity developments. We compiled the week’s most important cybersecurity news. - macOS malware stole Telegram sessions and replaced wallet apps. - Scattered Spider hackers were sentenced for hacking London’s transport system. - About 300 fake GitHub repositories distributed an infostealer. - The U.S. charged operators of Russian bulletproof hosting providers Media Land and ML.Cloud. macOS malware stole Telegram sessions and replaced crypto wallets Researchers at SlowMist detailed a macOS infostealer’s multi-pronged approach to stealing cryptocurrency. According to them, the malware hijacks authenticated messenger sessions and targets both software and hardware wallets. Once on a device, the malware collected sensitive data: passwords from the macOS Keychain, Safari cookies, hidden entries in Apple Notes, and databases from more than a dozen crypto wallets and browser extensions. How the malware works: - account takeover bypassing 2FA. The malware copies Telegram Desktop’s local session files. These let attackers log in to the victim’s account on another Mac without a phone number, SMS code, or two-factor authentication password, as the system treats the connection as a continuation of an already authorized session; - phishing. The software replaces legitimate hardware wallet apps (Ledger Live and Trezor Suite) with exact copies whose sole purpose is to trick the user into entering the seed phrase. The attackers decrypt stolen databases offline using passwords extracted from the compromised Mac, the researchers said. Targets included Exodus, Atomic, Electrum, Wasabi, Monero wallets, as well as full node clients (Bitcoin Core, Litecoin Core, Dash Core and Dogecoin Core). SlowMist urged users who suspect their Mac is compromised to immediately force-terminate all active sessions in Telegram settings, reauthenticate, and change passwords. To protect crypto assets, the firm advised generating a new seed phrase on a clean device and