A new macOS information stealer, a potential AMOS variant, targets crypto users and Ledger Live accounts, stealing passwords and wallet data using stealthy daemonization and local admin prompt tactics.

Written by Sahil Malvi itsMalvious | BAS & CTEM Advocate

Darktrace uncovers a crypto scam using fake software startups (AI, gaming, Web3 themes) with professional online presences to distribute Electron malware (Windows) and Atomic Stealer (macOS) for crypto theft.

In Part 1, we talked about the why behind building a cybersecurity brain with Kortex.  In Part 2, we set up Kortex for a hacker’s workflow…

Hey folks 👋  Today we’re diving into something really exciting: Atomic Red Team. If you’re into threat hunting or red/blue team practices…

A new report reveals a macOS malware campaign deploying Shamos, a variant of Atomic Stealer. The attackers use "ClickFix" to steal passwords and crypto wallets.

A malicious npm package impersonates the popular nodemailer library to inject code into crypto wallets on developers' PCs and steal funds from outgoing transactions.

A new malicious npm package, nodejs-smtp, is impersonating a popular email library to secretly hack cryptocurrency wallets and steal funds.

A new report reveals the AMOS infostealer is targeting macOS. The malware is spread via fake apps and malicious Terminal commands that bypass Gatekeeper.

The LastPass Threat Intelligence, Mitigation, and Escalation (TIME) team has issued a warning about an ongoing infostealer campaign that specifically targets Mac users through fraudulent GitHub re…

Leveraging the Atomic Red Team Framework to strengthen the Security Operations’ detection capabilities.

VirusTotal warns of massive supply chain attack on OpenClaw. Hackers use fake "skills" to deploy malware like Atomic Stealer. Verify your agents.

The burgeoning AI assistant ClawdBot has precipitously descended into the vortex of a sophisticated malware offensive. Cybersecurity analysts

Microsoft details 3 Python Infostealers hitting macOS users via fake AI tools, Google ads, and Terminal tricks to steal passwords and crypto, then erase traces.

Jamf identifies a macOS ClickFix pivot: attackers now use the Script Editor to bypass Terminal scans and deliver Atomic Stealer. Learn how to stay protected.

The newly discovered Reaper malware bypasses Apple's macOS Tahoe 26.4 security updates to steal passwords, crypto assets, and install a permanent backdoor.

Over 20 Linux packages were compromised in the Atomic Arch campaign, which abuses AUR ownership transfers to drop rootkit-like malware.

At a glance Malware family Atomic Stealer (AMOS) and MacSync infostealers Threat actor Unnamed operator running a Traffic Distribution System (attribution not stated) Target or victims Genuine mac…

Detection engineering is both a role and an activity. It’s the discipline of building and maintaining the logic that identifies malicious or risky behavior within your organization. It’s where security analysis meets software engineering, turning raw logs…

The world’s largest cryptocurrency exchange, Binance, is investigating a major security breach after approximately $6.3 billion in…