Hackers Exploit ChatGPT, Grok and Google Ads to Spread macOS AMOS Stealer
ID: 9fea3adc-10f9-51c7-91a7-ae50fefb60b1
STIX ID: report--9fea3adc-10f9-51c7-91a7-ae50fefb60b1
Feed Name: GBHackers
Threat Score
This report describes attackers abusing shareable AI chat pages (ChatGPT/Grok) and Google Search ads to push poisoned step-by-step Terminal commands that install the Atomic macOS Stealer (AMOS); it also notes notarized/signed macOS installers used to evade Gatekeeper, affiliate distribution models for stolen data, and recommended defender hunting signals.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.