Reading List

Notarized Atomic Stealer (AMOS) from Michael Tsai RSS feed.

Notarized Atomic Stealer (AMOS)

Jamf Threat Labs: After downloading and inspecting the binary, we confirmed that it was indeed both code-signed and notarized — a detail that raised immediate concern given its malicious nature.[…]The application itself is named “Gmeet_updater.app,” though there’s little effort to align that branding with the user experience, suggesting a rushed or careless repackaging process.After confirming […]