Atomic Stealer (AMOS), a dangerous infostealer malware on macOS, has been upgraded with a backdoor and persistence mechanism.
The new variant allows attackers persistent access, survives reboots, and enables deployment of other malware on compromised devices.
AMOS has been used in major hacking campaigns, extracting various data, bypassing macOS security features, and being distributed via fake apps and malicious websites.
Security experts warn that AMOS malware campaigns have expanded globally, affecting over 120 countries, including the US, France, Italy, UK, and Canada.