Jamf says PamStealer impersonates the Maccy clipboard manager, validates Mac passwords through PAM and reaches Ethereum RPC endpoints.