MacSync targets macOS crypto users with fake apps that steal passwords, wallet data and developer credentials.