Faux Safari and Chrome Updates Infecting Macs with AMOS Malware

First noticed in early 2023, a potent malware referred to as Atomic macOS Stealer (AMOS) has develop into a rising menace. It’s a robust piece of malware that targets Apple customers and methods them into putting in the software program on their machines. As soon as put in, it might probably steal iCloud Keychain passwords, bank card data, recordsdata, and extra. And now, within the newest iteration, AMOS is being delivered to Mac customers by way of pretend Safari and Chrome updates.

How AMOS Malware is injected into Macs

The early indicators of AMOS threats had been reported in March and April. In September, the safety researchers at Malwarebytes found that Mac customers had been tricked into putting in AMOS by way of pretend Google Search Adverts. Now, Malwarebytes reviews that AMOS is injected into Macs utilizing compromised web sites to ship pretend Safari and Chrome updates. This pretend browser replace chain is labeled as “ClearFake”, and was beforehand seen towards Home windows as nicely. Let’s see methods to spot pretend updates and keep away from the AMOS menace on Macs.

Faux Safari and Chrome Updates

Right here’s a pretend Safari replace that mimics the official web site. It’s fairly straightforward for Apple customers to identify it as there are outdated Safari and iCloud icons. Nonetheless, if somebody is new to the Apple ecosystem, it’s simpler for them to fall for this. So, beware.

Beneath is a extra convincing Google Chrome replace template that carefully resembles the genuine one.

Learn how to keep away from AMOS Malware on Macs

Whereas the AMOS malware is a menace, the excellent news is that it’s completely avoidable. Right here’s how:

• First, by no means obtain any software program updates from unknown or untrusted sources. Moderately, make certain to solely replace Safari immediately in your Mac’s System Settings. For Chrome, solely depend on the Chrome app or Google’s official web site. 
• If an app asks you to bypass macOS Gatekeeper protections, be very cautious and easily skip that app. 
• When you’re utilizing a brand new web site, examine when it was created, and don’t belief any random pop-ups, adverts, or obtain triggers.