Novel macOS Infostealer AmnesiaStealer Spread via ClickFix

Jamf researchers warn of AmnesiaStealer, a Rust-based macOS infostealer distributed via ClickFix social-engineering lures that tricks users into running a silent installer. The malware harvests Apple Notes, Telegram, credentials (including unlocking keychain files), browser data and cookies, and deploys a remote-controlled second stage that clones browser profiles to provide live, stealthy operator control via the DevTools protocol; Jamf recommends enabling threat prevention, advanced threat controls, and web protection to block and report such threats.