Amos Stealer Targets macOS Keychain Files and Browser Passwords
Amos Stealer, an information-stealing malware, is targeting Apple Mac computers to steal private data, according to new details from cybersecurity research firm CyberProof. Threat actors are, reportedly, actively using this malware family to run financially motivated campaigns by compromising macOS environments.
Although Amos Stealer is not new, in the latest campaign, the threat actors are distributing the infostealer through deceptive software downloads, fake websites, and social engineering lures.
Once inside a Mac, it searches for valuable files across system directories. It then collects stored passwords, session cookies, and autofill form information from Google Chrome and Microsoft Edge browsers.
Silent Download Methods
Researchers noted that the malware operators use a built-in macOS utility called curl to download the malicious files silently. During a recent incident investigation, a threat hunting query flagged an unusual curl command.
They noted that, while identifying the specific server address that cybercriminals were using to fetch...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
