TLDR InfoSec · ATTACKS & VULNERABILITIES

NEW AMNESIASTEALER MACOS MALWARE HIJACKS BROWSER SESSIONS VIA REMOTE CONTROL

links.tldrnewsletter.com2 min read

Summary from the TLDR InfoSec newsletter

Jamf researchers are warning of a new macOS infostealer that spreads via ClickFix attacks. The malware first captures the user's macOS password and uses it to collect keychain data. It also features a streaming profile that allows attackers to remotely control browser sessions and duplicate browser profiles on Chromium-based browsers.