Apple notarized it. It emptied fourteen password managers anyway.

Someone at Jamf pulled a Mac app out of the pile last week that had done everything right. Signed with a real Apple Developer ID. Notarized by Apple itself. Cleared Gatekeeper without a single warning. It was called CrashStealer, and it robbed the machine blind.

One dialog box. That's the whole heist.

You download what looks like a setup app, and it passes every Apple check, because it genuinely passes every Apple check. It quietly pulls a second app off GitHub, dresses it up as Apple's own crash reporter, and pops the one dialog every Mac user has been trained to obey on reflex: a system box asking for your login password. You type it. The malware confirms the password is real, then uses it to unlock your macOS keychain and walk off with everything inside.

Everything. The keychain. Your browser logins. Eighty crypto wallet extensions. And fourteen password managers by name: 1Password, Bitwarden, LastPass, Dashlane, Keeper, and nine more. One stealer, one afternoon, one forged password box.

The vault was on your Mac the whole time.

Not one of those password managers was hacked. That is the part that matters, so here it is plainly: nobody breached 1Password, nobody breached Bitwarden, their servers are fine, the malware never went near them. It just opened the vaults sitting on your Mac, with the login password you handed it, because that is where those vaults live, decrypted or one keychain-unlock away, on the same machine anyone can own with a single convincing lie.

That is the law nobody prints on the box: if your vault decrypts on your device, then owning your device owns your vault. Your password manager is exactly as safe as the least careful second you will ever have on that laptop. Apple's notarization did not protect you, it waved the robber through, because it checks the file you upload, not the file that file downloads an hour later. And the second app never meets Gatekeeper at all, because anything a running program writes skips the check. The whole trust chain is a deadbolt on the front door with no wall behind it.

Apple pulled the developer's signing credentials the moment Jamf reported them. The next crew registers new ones by Friday, because nothing about the technique got fixed.

So stop asking whether your password manager will be breached. It probably will not be. Ask the real question: what does a stealer carry off when it owns the machine your vault decrypts on? For every product on that list of fourteen, the answer is all of it.

An empty room.

There is one architecture that answer does not touch, and it is the one we built. Clavitor never decrypts a vault on your machine. There is no local vault file to open, nothing parked in the keychain, and no login password anywhere in the key path for a fake dialog to steal, because the vault key lives on your hardware key and nowhere else. Credentials are fetched live, one at a time, at the instant they are used, then gone. CrashStealer can run its entire routine against a Clavitor machine and find an empty room and a password prompt that unlocks nothing.

It would be a lie to say that makes the endpoint safe. Own the machine while a credential is mid-use and you can grab that one credential, in that one moment. But that is a single key in flight, not fourteen vaults at rest. CrashStealer's whole business model is that the loot is just lying there. Remove the loot, and the most sophisticated stealer on macOS leaves with one expiring token and a photo of your wallpaper.

Fourteen password managers, emptied by a dialog box, and not one of them was hacked. If that does not change how you think about where your secrets sleep at night, nothing will.

Clavitor (@clavitorai) is the credential vault built for AI agents, and against them. clavitor.ai

Sources

Jamf Threat Labs (@jamf): "CrashStealer: C++ macOS Infostealer Posing as Crash Reporter." The primary analysis, a notarized dropper clears Gatekeeper, fetches and re-signs a second-stage crash-reporter impersonator, forges the login-password prompt (validated locally), unlocks the macOS keychain, and harvests browsers, ~80 wallet extensions, and 14 password managers before AES-GCM exfil. Apple revoked the developer's signing credentials after Jamf's report. [1]

BleepingComputer (@BleepinComputer): "New CrashStealer malware poses as Apple crash reporting tool." [2]

The Hacker News (@TheHackersNews): "CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks." [3]

(Verify handles are live before posting: @jamf, @BleepinComputer, @TheHackersNews.)