We review a new macOS backdoor that piggybacks on cracked software to replace Bitcoin and Exodus wallets with malware.