New Wave of Odyssey Stealer Targets macOS Users in Active Cyberattack Campaign

### Executive Summary The report documents a widespread surge of Odyssey Stealer targeting macOS users globally; the macOS infostealer—evolved from Poseidon/AMOS—uses fake CAPTCHA (ClickFix) social engineering, base64-decoded AppleScript installers, LaunchDaemon persistence, and exfiltration to attacker-controlled C2 servers (example IP: 45.46.130.131) to harvest browser credentials, macOS Keychain entries, cryptocurrency wallets, and files, with a builder and control panel enabling operator management and custom builds.