According to ChainCatcher, citing SlowMist's Cosine, the North Korea-linked malware SilentSiphon is capable of extracting data from Apple Notes, Telegram, and browser extensions. It can also obtain credentials from browsers and password managers, as well as confidential information from configuration files related to numerous services.
Users should enhance their security awareness, regularly update software versions, avoid downloading applications from unknown sources, and use reliable security software for protection.