Shulou(Shulou.com)11/24 Report--

CTOnews.com Sept. 7 news, the network security company Cyble Research released a report in April this year, found that hackers are peddling malware against macOS-Atomic macOS Stealer (AMOS).

Cyber security company Malwarebytes released a report today that attackers placed ads in Google search to distribute AMOS malware that could attack both macOS and Windows devices.

CTOnews.com reported in April this year that the current version of AMOS accesses keychain passwords, system information, files in desktop and document folders, and Mac passwords.

AMOS can also infiltrate browser applications such as Chrome and Firefox, extract auto-fill information, passwords, cookie, wallets and credit card information, and search encrypted wallets such as Electrum, Binance and Atomic to facilitate theft of relevant information and property.

The steps for this malware to affect Mac devices are as follows:

Target Mac users and put malicious ads in Google search

Guide users to jump to phishing sites to trick victims into downloading camouflaged applications

Malware is bundled in an ad-hoc-signed application that Apple's system will not detect

The good news is that this particular attack is preventable:

Do not download software from untrusted or unknown sources

Be careful if your application asks you to bypass macOS GateKeeper protection

If you do want to download applications outside of Apple's Mac App Store, please check when the site was created

Related readings:

"sensitive information can be stolen, AMOS malware against macOS is exposed"

Referenc

Mac users targeted in new malvertising campaign delivering Atomic Stealer

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.