For the past few months, the vast majority of the malicious advertising campaigns we have identified have targeted Windows users. Given that Microsoft has the biggest market share for both desktop and laptop computers, that is not unexpected. The latter was a modified version of the brand-new yet wildly popular Atomic Stealer (AMOS) for Mac, and we just discovered a campaign that was spreading both Windows and Mac malware.
AMOS was first promoted as a Mac OS stealer with a strong focus on crypto assets in April 2023. It also included a file grabber and the ability to harvest passwords from browsers and Apple’s keychain. A new version of the project was released at the end of June as a result of the developer’s active work on it.