New 'Cuckoo' Persistent macOS Spyware Targeting Intel and Arm Macs

Cybersecurity researchers discovered 'Cuckoo', a universal Mach-O macOS information stealer distributed via trojanized apps on multiple software download sites; it performs geofencing, harvests keychain, browser, crypto wallet and app data, uses osascript to phish admin passwords, and achieves persistence via LaunchAgent, with analysts observing a spike in samples and delivery through cracked or bundled applications.