Back Cybersecuritynews

MacOS Stealer MioLab Adds ClickFix Delivery, Wallet Theft and Team API Tools

Cybersecuritynews •Tushar Subhra Dutta • March 23, 2026

A sophisticated macOS infostealer known as MioLab — also tracked as Nova — has emerged as one of the most advanced Malware-as-a-Service (MaaS) platforms targeting Apple users. Advertised on Russian-speaking underground forums, MioLab marks a shift in the threat landscape, proving macOS is no longer a low-risk target. As Apple’s market grows among software […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MioLab MacOS Stealer Targets Users with Advanced Theft Techniques MioLab, a sophisticated MacOS infostealer, has emerged as a significant threat in the cybercrime landscape, particularly targeting both consumer and enterprise users of Apple's macOS. Marketed on Russian-language forums as a premium Malware-as-a-Service (MaaS), it features an evasive binary and a mature web panel. The malware employs social engineering tactics to trick users into executing it, including spoofed system dialogs to capture passwords. Once activated, MioLab can harvest a wide range of sensitive data, including browser cookies, passwords, and cryptocurrency wallet information. It supports over 200 browser-based wallet extensions and targets various applications, including Safari and popular messaging platforms. The malware's architecture allows it to bypass macOS security features, indicating a high level of sophistication and intent. Its recent updates enhance its capabilities, particularly in cryptocurrency theft, making it a critical concern for users and organizations alike. 3 sources 67

Extracted Entities

MacOS Stealer MioLab Adds ClickFix Delivery, Wallet Theft and Team API Tools

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)

Ransomware Groups (1)

Tools (3)