A routine-looking download can turn into a much bigger problem for Mac users.
Jamf Threat Labs found an AmnesiaStealer campaign reaching macOS through a fake software download and capable of keeping attackers connected to browser sessions after infection. Researchers say the added access can extend the intrusion beyond the malware’s initial data theft.
An attack begins with a user-run Terminal command, but its more unusual stage comes later, after AmnesiaStealer is already inside the system.
A fake download opens the door on macOS
Jamf Threat Labs traced the campaign to a counterfeit GitHub-style page offering a macOS download. Visitors are…
Read the full article at TECHREPUBLIC.COM
