Atomic macOS Stealer (AMOS) Targets Credentials via Malicious Terminal Commands

**Executive Summary:** The Atomic macOS Stealer (AMOS) is a macOS infostealer distributed via malicious websites that trick users into pasting commands into Terminal; it installs persistent Mach-O binaries, exfiltrates browser credentials, messenger data, and cryptocurrency wallets to an HTTP-based C2, and organizations are advised to monitor for suspicious command-line activity, isolate infected devices, and reset affected credentials.