It reiterated that pilgrims require a Haj visa and it can be obtained through recognised official channels
The malware named "CookieMiner" is capable of stealing browser cookies associated with mainstream cryptocurrency exchanges and wallet service websites visited by the victims, said Unit 42, an arm of Palo Alto Networks.
It steals saved passwords in Chrome and iPhone text messages from iTunes backups on the tethered Mac.
"By leveraging the combination of stolen login credentials, web cookies and SMS data, based on past attacks like this, we believe the bad actors could bypass multi-factor authentication for these sites," the researchers noted.
If successful, the attackers would have full access to the victim's exchange account and/or wallet and be able to use those funds as if they were the user themselves.
The malware also configures the system to load coin-mining software on the system.
Web cookies are widely used for authentication. Once a user logs into a website, its cookies are stored for the web server to know the login status.
If the cookies are stolen, the attacker could potentially sign into the website to use the victim's account.
"Stealing cookies is an important step to bypass login anomaly detection. If only the username and password are stolen and used by a bad actor, the website may issue an alert or request additional authentication for a new login," said Unit 42 in a blog post on Thursday.
However, if an authentication cookie is also provided along with the user name and password, the website might believe the session is associated with a previously authenticated system host and not issue an alert or request additional authentication methods.
Most modern cryptocurrency exchanges and online wallet services have multi-factor authentication.
"CookieMiner" tries to navigate past the authentication process by stealing a combination of the login credentials, text messages and web cookies.
"If the bad actors successfully enter the websites using the victim's identity, they could perform fund withdrawals," said the researchers.
Apple's Safari is not the only web browser targeted. Google Chrome also attracts the threat actors' attention due to its popularity.
"Cryptocurrency owners should keep an eye on their security settings and digital assets to prevent compromise and leakage," the report suggested.
It reiterated that pilgrims require a Haj visa and it can be obtained through recognised official channels
The 18-year-old was taken to hospital in a serious condition
The brothers, who say they are innocent, are accused of having formed an organised criminal network in early 2021 in Romania, as well as in the US and Britain
The left-handed batter scored 3369 runs in 136 one-day internationals and 2893 in 140 Twenty20 internationals — both Pakistan records
Food supplies were distributed to 80 households
On January 31, a heart was airlifted from Delhi to Chennai, paving the way for Ayesha Rashid's life-saving surgery
The online retailer, which is headquartered in Singapore, has said it has around 108 million monthly active users in the 27-nation EU
The baby girl named Rouh, meaning Soul, suffered respiratory problems and a weak immune system, a doctor at the Emirati Hospital in Rafah said