Fake BlueWallet website distributes malware that steals passwords, accounts, and cryptocurrency from macOS users

A fake website impersonating BlueWallet directs Mac users to open a downloaded AppleScript file and run it in macOS Script Editor. Once executed, the malware may steal saved passwords, browser logins, cryptocurrency wallets, documents, and other sensitive data, and replace copied cryptocurrency wallet addresses with attacker-controlled addresses. Merely visiting and closing the website does not cause the described compromise; the attack requires opening and running the file.