According to Odaily Planet Daily, SlowMist founder Yu Xian wrote that Eastern European hackers recently released Trojan attack software targeting macOS. Once run, the Trojan will automatically steal Cookies saved by the browser, auto-fill information, password information, local encrypted mnemonics/private key files of the extended wallet, and information in the macOS Keychain.
Yu Xian pointed out that the attacker's steps include: decrypting the mnemonic/private key file encrypted locally in the extended wallet, hacking the account permissions saved by the browser, and hacking Telegram, Discord, etc. It is recommended to deal with these problems first after being attacked, and then perform antivirus or reinstall to recover.