Beware: Fake Apps Target macOS Users with Sneaky Malware in SEO Scam
LastPass warns macOS users about malware masquerading as popular software via fake GitHub repositories, using SEO to spread the Atomic info-stealing malware. The ClickFix attack tricks users into installing malware by pasting commands into Terminal. Avoid these by sticking to official vendor sites and ignoring mysterious commands.
Hot Take:
Looks like cybercriminals are taking a page out of a multi-level marketing playbook, offering malware-as-a-service with features akin to an all-you-can-eat buffet for hackers. But instead of Tupperware parties, they’re hosting fake software soirées on GitHub. Someone get these folks a job at a legitimate software company!
Key Points:
– LastPass warns of a campaign targeting macOS users with fake software apps on GitHub.
– The malicious apps deliver AMOS info-stealing malware, costing $1,000/month.
– Attackers use SEO tactics to promote these fake apps on search engines.
– AMOS malware now includes a backdoor for persistent access to compromised systems.
– Users are advised to download software from official vendor websites to avoid ClickFix attacks.