Fake Safari and Chrome Updates Infecting Macs with AMOS Malware
First spotted in early 2023, a potent malware called Atomic macOS Stealer (AMOS) has become a growing threat. It’s a powerful piece of malware that targets Apple users and tricks them into installing the software on their machines. Once installed, it can stealiCloud Keychain passwords, credit card information, files, and more. And now, in the latest iteration, AMOS is being delivered to Mac users via fake Safari and Chrome updates.
How AMOS Malware is injected into Macs
The early signs of AMOS threats were reported in March and April. In September, the security researchers at Malwarebytesdiscoveredthat Mac users were tricked into installing AMOS via fake Google Search Ads. Now, Malwarebytesreportsthat AMOS is injected into Macs using compromised websites to deliver fake Safari and Chrome updates. This fake browser update chain is labeled as “ClearFake”, and was previously seen against Windows as well. Let’s see how to spot fake updates and avoid the AMOS threat on Macs.
Fake Safari and Chrome Updates
Here’s a fake Safari update that mimics the official website. It’s quite easy for Apple users to spot it as there are outdated Safari and iCloud icons. However, if someone is new to the Apple ecosystem, it’s easier for them to fall for this. So, beware.
Below is a more convincing Google Chrome update template that closely resembles the authentic one.
How to avoid AMOS Malware on Macs
While the AMOS malware is a threat, the good news is that it is totally avoidable. Here’s how:
Kanika Gogia
Kanika has been a loyal iPhone user since 2014 and loves everything Apple. With a Master’s in Computer Applications, passion for technology, and over five years of experience in writing, she landed at Beebom as an Apple Ecosystem Writer. She specializes in writing How To’s, troubleshooting guides, App features, and roundups for Apple users to help them make the best use of their gadgets. When not writing, she loves to try out new recipes and enjoy some family time.
Add new comment
Name
Email ID
Δ
01
02
03
04
05
