AI-Poisoning & AMOS Stealer: How Trust Became the Biggest Mac Threat

Huntress details an active AMOS macOS infostealer campaign that poisons search results and maliciously authored ChatGPT/Grok conversations to trick users into copying Terminal commands; these commands fetch a loader that harvests credentials (via dscl-authonly), escalates to root, deploys a persistent Mach-O stealer (.helper), trojanizes wallet apps, and exfiltrates sensitive data. The report includes a high-level technical analysis, persistence and watchdog techniques, IOCs (file hashes, filenames, IPs, domains), and detection/mitigation recommendations for defenders and end users.