A new macOS malware clones browser profiles to operate concealed Chrome or Firefox sessions, allowing attackers to use live logins without mirroring the victim’s screen.
Security experts found that specific Cyrillic characters bypass Chromium's display rules, enabling fake domains to appear as trusted brands without Punycode warnings.