Security News > 2023 > September > Mac Users Beware: Malvertising Campaign Spreads Atomic Stealer macOS Malware

A new malvertising campaign has been observed distributing an updated version of a macOS stealer malware called Atomic Stealer, indicating that it's being actively maintained by its author.

An off-the-shelf Golang malware available for $1,000 per month, Atomic Stealer first came to light in April 2023.

The macOS payload is a new version of Atomic Stealer released at the end of June, which is bundled in an ad-hoc signed app that, once executed, prompts users to enter their password on a fake prompt and harvest files as well as data stored in iCloud Keychain and web browsers.

The development comes as macOS is increasingly becoming a viable target of malware attacks, with a number of macOS-specific info stealers appearing for sale in crimeware forums in recent months to take advantage of the wide availability of Apple systems in organizations.

"While Mac malware really does exist, it tends to be less detected than its Windows counterpart," Segura said.

Atomic Stealer is not the only malware propagated via malvertising and search engine optimization poisoning campaigns, as evidence has emerged of DarkGate latching onto the same delivery mechanism.

News URL

https://thehackernews.com/2023/09/mac-users-beware-malvertising-campaign.html