How to remove "mac.c" stealer-type malware from your Mac device

What kind of malware is mac.c?

mac.c is a stealer-type malware written in the C programming language. It can infect all Mac operating system versions above macOS Sierra. This malicious program is designed to steal sensitive information from compromised devices, including personal files, passwords, and cryptocurrency wallets.

mac.c malware overview

mac.c stealer can infect macOS Sierra (10.12.6) and versions above and supports both system architectures (x64-86 and ARM). It is incredibly lightweight at approximately 86 KB in size.

Upon successful infiltration, mac.c displays a pop-up requesting the victim to enter their user account password. The attackers can change the exact text in this window (i.e., to create the best lure to trick users into entering their log-in credentials).

This stealer gathers data about the infected machine and connected devices. mac.c can extract log-in credentials from Keychain – the native macOS password manager. It can also obtain browsing histories, auto-fills (e.g., usernames, personally identifiable details, etc.), Internet cookies, and passwords from Chromium-based browsers.

This program targets Telegram messenger sessions and seeks to steal data associated with cryptowallets and cryptocurrency-related browser extensions. mac.c can download files from the desktop and documents directories. Targeted formats can be configured by the attackers.

It is noteworthy that this stealer's developers are promoting a module (but are selling it separately from mac.c), which operates by replacing the Ledger app with a fake one that aims to record entered wallet log-in credentials (phishing).

It must be mentioned that malware developers often improve upon their programs and methodologies. Therefore, potential future iterations of mac.c could have a broader target list or additional/different features.

To summarize, the presence of malicious software like the mac.c stealer on devices can lead to severe privacy issues, financial losses, and identity theft.

Stealer-type malware examples

We have investigated numerous malicious programs; Odyssey, Cthulhu, and Banshee are merely a few of our articles on Mac-specific stealers. Malicious software within this classification can seek incredibly specific information or a wide variety of data. What is more, these programs are often used together with other malignant software.

However, regardless of how malware operates – its presence on a system endangers device integrity and user safety. Hence, all threats must be eliminated immediately upon detection.

How did mac.c malware install on my computer?

The developer(s) of mac.c stealer is offering it for sale on hacker forums. Hence, how this program is proliferated may depend on the cyber criminals using it (i.e., distribution techniques might vary between attacks).

Generally, malware is spread using phishing and social engineering tactics. Typically, software of this kind is presented as or bundled with ordinary content. Malicious files come in various formats, and merely opening such a file can be enough to trigger the infection chain.

Malware is predominantly proliferated via drive-by (stealthy/deceptive) downloads, malicious attachments/links in spam (e.g., emails, DMs/PMs, social media posts, etc.), malvertising, online scams, suspicious download sources (e.g., freeware and third-party websites, Peer-to-Peer sharing networks, etc.), pirated programs/media, illegal software activation tools ("cracks"), and fake updates.

Some malicious programs can even self-spread through local networks and removable storage devices (e.g., external hard drives, USB flash drives, etc.).

How to avoid installation of malware?

We strongly recommend downloading only from official and verified sources. Additionally, all programs must be activated and updated using legitimate functions/tools, as those obtained from third-parties can contain malware.

Another recommendation is to be careful while browsing since fake and dangerous online content usually appears genuine and harmless. Incoming emails and other messages must be approached with caution. Attachments or links found in suspect/irrelevant mail must not be opened, as they can be malicious.

We must emphasize the importance of having a reputable antivirus installed and kept up-to-date. Security software must be used to run regular system scans and to remove detected threats and issues. If you believe that your computer is already infected, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate infiltrated malware.

Screenshot of mac.c stealer promoted on a hacker forum:

Instant automatic malware removal:

Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:

By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.

Quick menu:

• What is "mac.c"?
• Remove PUA related files and folders from OSX.

Video showing how to remove adware and browser hijackers from a Mac computer:

Potentially unwanted applications removal:

Remove potentially unwanted applications from your "Applications" folder:

Click the Finder icon. In the Finder window, select "Applications". In the applications folder, look for "MPlayerX","NicePlayer", or other suspicious applications and drag them to the Trash. After removing the potentially unwanted application(s) that cause online ads, scan your Mac for any remaining unwanted components.

Frequently Asked Questions (FAQ)

My computer is infected with mac.c malware, should I format my storage device to get rid of it?

No, mac.c stealer's removal does not necessitate formatting.

What are the biggest issues that mac.c malware can cause?

The dangers associated with an infection depend on the program's functionalities and the attacker's goal. mac.c is designed to steal vulnerable information from devices (e.g., passwords, cryptocurrency wallets, personal files, etc.). Stealer-type malware infections can lead to serious privacy issues, financial losses, and identity theft.

What is the purpose of mac.c malware?

The purpose of malware can differ based on the attacker's aims. Most infections are driven by profit. However, cyber criminals can also use malware to amuse themselves or realize personal grudges, disrupt processes (e.g., sites, services, companies, etc.), engage in hacktivism, and launch politically/geopolitically motivated attacks.

How did mac.c malware infiltrate my computer?

The most prevalent malware distribution techniques include: drive-by downloads, online scams, malvertising, spam mail, untrustworthy download sources (e.g., freeware and free file-hosting websites, P2P sharing networks, etc.), illegal program activation tools ("cracks"), and fake updates. Furthermore, some malicious programs can self-spread through local networks and removable storage devices.

Will Combo Cleaner protect me from malware?

Yes, Combo Cleaner can detect and remove almost all known malware infections. It must be stressed that performing a full system scan is essential since high-end malicious software usually hides deep within systems.