Mac Attack: Sneaky SHAMOS Malware Targets Apple Users Globally!
CrowdStrike warns of a surge in attacks on macOS users by Cookie Spider using a variant of the Atomic macOS Stealer. The group lures victims with malvertising, leading them to fake help sites where they’re tricked into running malicious commands. This scheme bypasses security checks and pilfers sensitive data.

Hot Take:
Looks like Cookie Spider spun its web a little too wide this time, targeting macOS users with an appetite for stolen credentials. If only these hackers put as much effort into legitimate business as they did in creating malware, they could probably afford their own fancy MacBooks without having to pilfer ours!
Key Points:
- Cybercrime group Cookie Spider is using AMOS malware-as-a-service to target macOS users.
- Malvertising campaigns lead users to fraudulent sites, tricking them into running malicious commands.
- The SHAMOS variant of the malware includes anti-VM checks and data exfiltration capabilities.
- Victims span multiple countries, excluding Russia, with targets lured via fake ads.
- Cybercriminals reportedly impersonated a legit Australian electronics store for their Google Ads profile.
Already a member? Log in here