AmnesiaStealer macOS malware can take over browser sessions

Intelligence Summary

AmnesiaStealer is a new information-stealing malware targeting macOS users. The threat uses ClickFix attacks to compromise victims. It also includes a streaming module that lets an attacker interactively control the victim's web browser. This browser session hijacking increases the risk of credential and data theft during the session. Users on macOS should review security and watch for suspicious ClickFix-related activity and browser control behavior.

Recommended Action

Confirm whether the affected technology is in use in your environment before deciding on remediation. Until then, watch authentication and outbound traffic logs for the indicators described in the source. This signal rests on a single report, so corroborate it before acting on anything irreversible.

Topics