/
ttps_attack:T1564.001 × victim_sectors:cryptocurrency × limpar

Resultados

2 casos · pág. 1/1

unit42.paloaltonetworks.com · medium

Atomic macOS Stealer (AMOS) infection chain analyzed from fake macOS toolkit install page, August 2026

Unit 42 analyzed an Atomic macOS (AMOS) stealer infection generated in a lab on Aug. 5, 2026, starting from a fake "macOS toolkit" instruction page hosted at getmacouscloud.com. The page tells victims to paste a command into Terminal, a ClickFix-style copy/paste technique, which downloads a Zsh script and then installs a Mach-O AMOS paylo…

securelist.com · high

MacSync macOS stealer returns with binary droppers, iCloud calendar staging and a backdoor targeting crypto users and developers

Kaspersky researchers describe a new MacSync macOS infostealer variant, first seen in the wild in September 2026, that replaces the earlier AppleScript-based droppers with FAT Mach-O binaries written in Objective-C and Swift. MacSync is sold as malware-as-a-service, so delivery varies by operator. In this campaign it spread through malici…