XCSSET macOS malware adds clipboard hijacking, Firefox data theft, and new persistence methods, Microsoft warns.

Note: If you’re using MetaMask, Phantom, Trust Wallet, or any crypto app, the advice is simple, take your time, check every character, and when possible, use a hardware wallet.

The code includes pre-loaded instructions to target 56 browser wallet extensions and is designed to extract private keys, credentials, and certificates.

I’ve pinned a whole lot of stuff to my Windows Clipboard — so much stuff that I’d forgotten that there were screenshots of ID cards in Clipboard history for a license renewal I did once. I nearly fell ...