New AmnesiaStealer macOS malware hijacks browser sessions via remote control
AmnesiaStealer is a new information-stealing virus that uses ClickFix attacks to target macOS users. It has a streaming module that gives the attacker interactive control over the victim's web browser.
One noteworthy feature is the ability to load the victim's Chromium profile—including its authentication state—into a headless, hidden browser on the compromised system.
This keeps the browser, host, and network identifiers intact while enabling the hacker to access victims' authenticated sessions.
AmnesiaStealer has the ability to gather sensitive data from 16 Chromium-based web browsers, including passwords, cryptocurrency wallets, Apple Notes and documents, and keychain information. Currently, ClickFix ads that leverage a phony GitHub download page to dump a password-protected Z...