Moonlock Lab has detected a surge in Odyssey theft Trojans on the macOS platform, affecting over 100 countries. The Odyssey Trojan can steal data from browsers such as Chrome, Brave, and Edge, as well as wallet files and approximately 300 encrypted extension IDs from over 16 encrypted applications such as Electrum, Exodus, and Ledger Live. It can obtain SSH keys, cloud service configurations, Keychain databases, Telegram, and Discord data, and install a boot up backend service in the system to replace applications such as Ledger, Trezor, and Exodus with Trojan versions that can steal assets.
