--- title: "Unreal Safari and Chrome updates infect Mac devices with AMOS malware" description: "Beware of Fake Browser Updates on macOS: Atomic Stealer Malware Targets Mac Owners." author: "Saumya Mishra" published: 2023-11-23 updated: 2023-11-23 canonical: https://www.mindstick.com/news/3569/unreal-safari-and-chrome-updates-infect-mac-devices-with-amos-malware category: "technology" tags: ["google", "safari browser"] reading_time: 2 minutes --- # Unreal Safari and Chrome updates infect Mac devices with AMOS malware - **Fake Google** [**Chrome and Safari**](https://www.mindstick.com/blog/301667/safari-vs-chrome-the-best-browser) **updates are being used to distribute the Atomic Stealer malware, also known as AMOS, on macOS devices.** - **The malware is distributed through [social engineering](https://www.mindstick.com/forum/158557/what-are-the-key-steps-involved-in-conducting-a-successful-social-engineering-attack) tactics, hijacking WordPress websites to lure users into downloading the malicious updates.** - **AMOS can steal passwords, private files, and other [sensitive data](https://www.mindstick.com/forum/157782/how-do-you-protect-sensitive-data-such-as-passwords-and-credit-card-information-in-an-asp-dot-net-app) from infected** [**Mac**](https://www.mindstick.com/articles/12464/what-is-mac-o-s) **computers.** Mac users are being targeted by a new wave of [malware attacks](https://www.mindstick.com/forum/158563/what-is-the-role-of-antivirus-software-in-preventing-malware-attacks) that utilize **fake browser updates** to **infiltrate** their systems. The malware, known as **Atomic Stealer or AMOS**, is being distributed through a social engineering campaign that hijacked WordPress websites to deliver fake Chrome and Safari updates. Fake updates pretend to download **legit** software from trusted resources. After getting into their computers, the malware asks a victim for an administrator password that enables it to retrieve confidential information from the devices. Researchers from **Malwarebytes** identified the [latest version](https://www.mindstick.com/forum/159157/what-is-the-latest-version-of-c-sharp) of Atomic Stealer and its distribution method through the **ClearFake campaign**. They discovered that the malware is delivered via hijacked websites that closely resemble official browser download pages. In the case of Chrome, the fake update page is particularly convincing, while the Safari update page uses outdated icons from older **macOS versions**. Users need to be careful not to contract this malware by [downloading software](https://answers.mindstick.com/qa/110353/how-to-percentage-screen-on-zoom-without-downloading-software-program) from unfamiliar sites. Other measures should include enabling the web protection settings in their [web browsers](https://answers.mindstick.com/qa/112310/how-do-i-implement-push-notifications-in-mobile-apps-and-web-browsers) like setting Safe Browsing in Chrome to prevent malicious sites from loading. ![Unreal Safari and Chrome updates infect Mac devices with AMOS malware](https://www.mindstick.com/usernews/655071/b501d27c-703d-4cf3-abc1-1f4fbfce66be/images/0f032cc8-91af-48c9-a164-131e5e51c020.jpg) Additionally, users should be aware that [**Apple**](https://www.mindstick.com/category/news/apple)does not distribute Safari updates outside of [operating system](https://www.mindstick.com/articles/229069/operating-system-development) updates. Therefore, there are no official Safari downloads that can be installed independently. By staying vigilant and following these precautions, Mac users can help safeguard their devices against malware attacks like Atomic Stealer. --- Original Source: https://www.mindstick.com/news/3569/unreal-safari-and-chrome-updates-infect-mac-devices-with-amos-malware Copyright © MindStick Software Pvt. Ltd. This Markdown version is provided for developers, AI systems, and offline reading.