Netskope Threat Labs

Cuckoo

ATP Sandbox Adv. Heuristics

Cuckoo is a macOS information stealer that spread through pirated software downloads and trojanized applications starting in 2023. It harvests Keychain data, browser secrets, and cryptocurrency wallet files, and its operators combined it with malicious advertising to reach victims searching for cracked applications.

First seen
May 2024
Last seen
October 2026
Alert Name
MacOS.Trojan.Cuckoo