macOS infostealer malware Atomic infects users'through a campaign promoting fake browser updates, tracked as ClearFake.
“This may be the first time we see one of the major social engineering campaigns, previously targeted at Windows, branch out not only in terms of geographic location but also operating system,” said Jérôme Segura of Malwarebytes.
Atomic Stealer (also known as AMOS), was first observed in April 2023 and can be acquired and used by cybercriminals by paying a $1,000 per month subscription. One of its key capabilities is the collection of data from browsers and cryptocurrency wallets.
See also: Atomic info-stealer: Beware! New macOS malware
In September 2023, Malwarebytes uncovered an Atomic Stealer distribution campaign that advertised a financial charting platform known as TradingView via Google . macOS users who searched for the platform and clicked on these ads ended up with the macOS infostealer malware Atomic on their device.
The ClearFake campaign, on the other hand, is a malware distribution campaign that uses websites WordPress to display fake browser update notifications, but in reality, it infects devices with malware.
As of November 2023, the ClearFake campaign expanded to target systems , leveraging compromised websites to deliver Atomic Stealer in the form of a DMG file.
See also: DarkGate and PikaBot malware fill the gap left by Qakbot (QBot)
"The popularity of infostealers like AMOS makes it very easy to tailor the payload to different victims, with minor adjustments," Segura said.
User protection
Mac users can take steps to prevent Atomic infostealer infection through the ClearFake campaign. One of the most important steps is to always update their operating system to the latest version. Updates often include security improvements that can protect them from known risks.
Additionally, Mac users should be carefulabout how they open and download files from the internet. By avoiding opening files from untrusted sources and avoiding installing unwanted programs, they can reduce the risk of falling victim to the ClearFake attack.
See also: LittleDrifter malware: Gamaredon hackers' new worm targets Ukraine
Additionally, using software security Mac can provide additional protection. Such software can detect and block malware before it can cause damage to the system.
Finally, Mac users should be careful with emails . By avoiding opening attachments and clicking on strange links, they can avoid potentially introducing malware to their system.
Source: thehackernews.com
