This Malware Can Take Over Web Browsers on macOS, but You Can Protect Yourself

In a new ClickFix attack iteration, hackers are pushing an infostealing malware to macOS users that is capable of hijacking your sessions in Google Chrome, Microsoft Edge, and a number of other Chromium-based browsers. AmnesiaStealer grants remote control of your browser and access to plenty of personal data, so you should know how to spot the campaign and protect your device from compromise. AmnesiaStealer hijacks your web browser on macOS As BleepingComputer reports , AmnesiaStealer can copy a victim's Chromium profile, which allows it to collect data across 16 Chromium-based web browsers, access authenticated sessions, and control them remotely. This means threat actors can navigate across websites, export or import cookies, and access online portals as well as grab saved logins, history, bookmarks, extensions, and cryptocurrency wallet data. AmnesiaStealer can also capture your macOS password and gain access to keychain data, Apple Notes, Telegram sessions, documents, and system information. Researchers at security company Jamf found that hackers are distributing the malware via a password-protected ZIP archive on a fake GitHub page and are gaining this level of access when users run a Terminal command that downloads and installs the payload. The campaign mirrors previously identified Atomic and MacSync infostealers . How to avoid browser takeover attempts The best way to protect yourself from AmnesiaStealer is to be vigilant against ClickFix attacks, which use social eng…