AmnesiaStealer Malware Targets macOS Users, Hijacking Web Browsers and Stealing Data
Researchers at security company Jamf have identified a new infostealing malware, dubbed AmnesiaStealer, that is targeting macOS users. This malware is capable of hijacking sessions in various Chromium-based web browsers, including Google Chrome and Microsoft Edge. Threat actors are distributing AmnesiaStealer through a password-protected ZIP archive hosted on a fake GitHub page. Users become infected when they execute a Terminal command that downloads and installs the malicious payload. Once installed, AmnesiaStealer can copy a victim's Chromium profile, allowing it to collect data across 16 Chromium-based browsers, access authenticated sessions, and control them remotely. This enables attackers to navigate websites, export/import cookies, access online portals, and steal saved logins, browsing history, bookmarks, extensions, and cryptocurrency wallet data. The malware can also capture macOS passwords and gain access to keychain data, Apple Notes, Telegram sessions, documents, and system information. This ...