AmnesiaStealer macOS Malware Hijacks Browser Sessions via Fake GitHub Lure

A newly identified macOS infostealer called AmnesiaStealer is spreading via a convincing fake GitHub download page, tricking Mac users into pasting a malicious Terminal command that silently installs malware and can later grant attackers live, hidden control of the victim’s browser session. Security researchers at Jamf Threat Labs discovered the campaign after spotting a counterfeit site at github.aoitour[.]com that near-perfectly copies GitHub’s dark theme, Octocat logo, and “Verified Publisher” badge. Instead of offering a real download, the page displays a “Terminal installation” box with a one-click copy button and step-by-step instructions telling visitors to open Terminal, paste the command,...

Read the full article at the source.