Atomic macOS infostealer adds backdoor for persistent attacks
A new version of the Atomic macOS info-stealer, or "AMOS," was found by a malware analyst. It has a backdoor that allows attackers to have continuous access to victim systems.
The new component maintains control over infected hosts indefinitely, endures reboots, and enables the execution of arbitrary remote commands.
Moonlock, MacPaw's cybersecurity branch, examined the backdoor in Atomic malware following a tip from g0njxa, an independent researcher who closely monitored infostealer behavior.
According to the researchers, AMOS malware operations have already spread to more than 120 countries, with the US, France, Italy, the UK, and Canada being the most afflicted. It is now possible for the backdoored version of Atomic macOS Stealer to fully access thousands of Mac systems acros...