Loading malware…
Atomic Stealer, also known as Atomic macOS Stealer or AMOS, is a macOS information-stealing malware family that emerged in 2023 and is distributed through a malware-as-a-service model. It targets individuals and organizations, including cryptocurrency users, developers, and technology and financial-sector environments. Payloads support both Intel and Apple Silicon Macs.
AMOS steals browser-saved passwords, cookies, authenticated sessions, browsing history, macOS Keychain contents, cryptocurrency-wallet data, private keys, seed phrases, and sensitive files. Observed campaigns also collect password-manager exports and SSH and GPG keys. Its theft of authentication artifacts enables account-session hijacking, while wallet and credential collection supports financially motivated compromise. The malware profiles infected systems and exfiltrates collected information to attacker-controlled infrastructure using HTTP or encrypted communications.
Distribution methods include phishing, deceptive software downloads, malicious advertisements, SEO-poisoned pages, and ClickFix social engineering. ClickFix campaigns impersonate CAPTCHA checks or software-installation workflows and persuade victims to execute commands in Terminal. Other distribution channels include malicious npm packages and third-party AI-agent skills. AMOS has been delivered by Meowsterio and through packages associated with the REF8801 operation targeting cryptocurrency startups and founders; these are distribution associations rather than attribution of the malware's development.
Observed infection chains use shell scripts and architecture-specific executables, remove macOS quarantine attributes, apply ad-hoc signatures, and disguise payloads as legitimate system components. Some versions establish persistence through LaunchAgents and background components. Additional backdoor components can maintain access and execute arbitrary commands, extending an infection beyond one-time information theft.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
2 CVEs Mallory has correlated with this family across public research and vendor advisories. Each row links to the full Mallory page for that vulnerability.
"A critical remote code execution (RCE) vulnerability, identified as CVE-2025-55182 and dubbed React2Shell, exists within the React Server Components (RSC) architecture, allowing unauthenticated attackers to execute arbitrary code..."
The campaign coincides with the disclosure of a high-severity OpenClaw vulnerability (CVE-2026-25253) that enables one-click remote code execution through token exfiltration and WebSocket hijacking. Although patched in late January 2026, the flaw points to the platform’s growing attack surface.
8 distinct threat actors attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.
One of the most notable examples of this shift is Atomic macOS Stealer (AMOS), a specialized malware family designed to steal sensitive data directly from Apple users.
A separate skill called omnicogg embedded the AMOS malware dropper inside a README.md file, then padded it with 22 MB of junk characters to exceed file size limits that most scanning pipelines enforce.
The campaign is infecting Mac devices with the Atomic macOS Stealer (AMOS) infostealer, which steals browser credentials, cryptocurrency wallet data, Keychain data, messaging app information, and user documents.
Diversified Malware Toolkit: Crazy Evil uses advanced tools like Stealc and AMOS for Windows and macOS, ensuring widespread compromise.
Odyssey isn’t original work. It’s a direct rebrand of Poseidon Stealer, which itself was forked from Atomic macOS Stealer (AMOS).
31 distinct techniques documented for this family, organized by ATT&CK tactic.
The official HBO Max Reddit account was reportedly compromised and used in a malvertising campaign... The compromised account published 108 advertisements... promoting fake downloads.
MITRE Technique Names: Local Account; MITRE Technique IDs: T1078.003
The fake Mac installation guide instructed the user to paste a curl command into Terminal, triggering a six-stage chain. ChatGPT and Grok pages similarly provided ClickFix-style terminal commands.
The sites instructed visitors to open Terminal on their Mac or, on Windows, the Run dialog or PowerShell, and paste in a command. This is the hallmark of a growing social engineering technique known as ClickFix.
Victims clicked Bing sponsored ads or top-ranked search results that led to malicious Claude Artifacts, claude.ai/share pages, and shared ChatGPT/Grok conversations.
The official HBO Max Reddit account was reportedly compromised and used in a malvertising campaign... The compromised account published 108 advertisements... promoting fake downloads.
The official HBO Max Reddit account was reportedly compromised and used in a malvertising campaign... The compromised account published 108 advertisements... promoting fake downloads.
MITRE Technique Names: Obfuscated Files or Information; MITRE Technique IDs: T1027
The official HBO Max Reddit account was reportedly compromised and used in a malvertising campaign... The compromised account published 108 advertisements... promoting fake downloads.
MITRE Technique Names: System Information Discovery; gathers system profiling information, such as macOS version
MITRE Technique Names: Local Accounts; MITRE Technique IDs: T1087.001
744 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Full values are available in Mallory.
IPs, domains, and DNS infrastructure linked to this family.
File hashes (MD5, SHA-1, SHA-256) from samples and reports.
Other indicator types observed in public reporting.
200 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
macOS information stealer distributed through three earlier malicious npm packages associated with the same fake Web3 accelerator operation: @apexfdn/apex, @copilot-mcp/apex, and @apexfdn/copilot-mcp. The article does not detail its collection or exfiltration capabilities.
An information-stealing malware family mentioned as an example of payloads delivered through malicious ClawHub skills. The reference provides no further details about its capabilities or specific campaigns.
macOS information stealer associated with the reported ClickFix-driven, blockchain-hosted campaign. OSINT linked observed DGA domains to AMOS, although the report does not establish payload-level confirmation on each affected device.
Listed as a stealer without further technical details or an explicit connection to the ICMacOS operation.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.