Get the latest tech news
Atomic macOS Stealer now includes a backdoor for persistent access
This new AMOS version allows persistent access.
This change allows attackers to maintain persistent access to a victim’s Mac, run arbitrary tasks from remote servers, and gain extended control over compromised machines. There are currently 2 main distribution vectors for AMOS: websites offering cracked or fake software, and spear phishing campaigns targeting high-value individuals like large crypto owners. The overall AMOS infection process closely mirrors the early stages of North Korean attack patterns, but significant changes occur after the initial data theft is complete.
Or read this on r/apple