PamStealer uses a fake Maccy website and PAM based password validation to steal macOS login credentials and browser data.