Google ads funnel Mac users to poisoned AI chats that spread the AMOS infostealer

Researchers have observed campaigns that insert curated AI-chat conversations and poisoned/sponsored search results into Google to trick macOS users into running copy-pasted Terminal commands which decode and execute multi-stage scripts that install the AMOS infostealer; the report details the infection chain, attacker use of prompt engineering and SEO, detection/removal steps, and user safety guidance.