TLDR InfoSec · ATTACKS & VULNERABILITIES

ATOMIC MACOS INFOSTEALER ADDS BACKDOOR FOR PERSISTENT ATTACKS

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

Malware analysts discovered a new version of the Atomic macOS (AMOS) infostealer, which includes a backdoor that offers attackers persistent access to compromised systems. The new version of the malware features an embedded backdoor, utilizes LackDaemons to survive reboots, implements ID-based victim tracking, and introduces new C2 infrastructure. The embedded backdoor allows threat actors to execute commands remotely, log keystrokes, introduce additional payloads, or probe for lateral movement opportunities.