TLDR InfoSec · ATTACKS & VULNERABILITIES

MACOS STEALER POSING AS LOOM IS SPREADING VIA GOOGLE ADS

moonlock.com6 min read

Summary from the TLDR InfoSec newsletter

Moonlock Labs has uncovered a new AMOS stealer variant that spreads by masquerading as the Loom screen recorder on Google Ads. In addition to usual infostealer malware capabilities, this new variant contains the capability to clone and swap legitimate apps such as a crypto wallet to wipe victims' wallets. This variant also includes files that suggest that it is targeting gamers.