- AMOS relies on users executing malicious terminal commands themselves
- Sophos MDR identified ClickFix-style social engineering in macOS attacks
- Half of macOS stealer reports involved AMOS, but Apple is fighting back
Atomic macOS Stealer, also known as AMOS, is a persistent macOS security threat because it does not need sophisticated zero-day vulnerabilities to compromise Apple devices.