More malware from Google search
Summary
The Eclectic Light Company reports on a new Mac malware campaign delivered via Google search results, distributing AMOS (alias SOMA) stealers. Attackers use forged Apple-like sites and Medium posts to lure victims, including a campaign that prompts users to paste a malicious Terminal command; the payload involves a Mach-O binary and hidden files, with requests for access to Documents and Notes. The piece offers practical prevention tips and emphasizes verifying provenance and avoiding obfuscated commands.