Security News PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence TheHackerNews Daniel Bender 25 Sep 2026 Share PamStealer now uses live key exchange to block static payload recovery and is delivered through a fake Wavel macOS download.