TLDR InfoSec · STRATEGIES & TACTICS
INFOSTEALER HAS ENTERED THE CHAT
Summary from the TLDR InfoSec newsletter
Criminals are exploiting interest in OpenAI's Atlas browser by buying Google ads that point to a shared ChatGPT conversation posing as an installation guide for a macOS “Atlas browser.” The guide instructs users to run a one‑line Terminal command that silently downloads a script, steals credentials, and deploys the AMOS infostealer, which exfiltrates browser data, crypto‑wallet info, documents, and more, while also installing a backdoor for persistent remote access.