New macOS Malware Clones Your Logged-In Browser and Gives Hackers Remote Control.
ID: 01f67422-4d1c-5178-8cb8-af407d3e4893
STIX ID: report--01f67422-4d1c-5178-8cb8-af407d3e4893
Feed Name: GBHackers
Threat Score
AmnesiaStealer is a multi-stage macOS infostealer delivered through counterfeit GitHub lures that tricks users into running shell commands; it collects browser data and keychain secrets, establishes persistence via a LaunchDaemon, and — critically — can clone logged-in Chromium profiles and stream them to remote operators via the Chrome DevTools Protocol to interact with authenticated sessions without visibly taking over the victim’s desktop.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.