Back Cybersecuritynews

Malvertising Campaign Delivers AMOS ‘malext’ macOS Infostealer via Fake Text‑Sharing Lures

Cybersecuritynews •Tushar Subhra Dutta • March 3, 2026

A new malvertising campaign is actively targeting macOS users worldwide, delivering a new variant of the AMOS infostealer called “malext.” Attackers are purchasing Google ads that push victims toward fake help articles on free text-sharing websites, where a deceptive terminal command silently installs the stealer on their machines. The campaign first came to light […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malvertising Campaign Distributes AMOS ‘malext’ Infostealer to macOS Users A malvertising campaign has emerged, targeting macOS users globally with a new variant of the AMOS infostealer known as 'malext.' Attackers are utilizing Google ads to direct victims to fake help articles on text-sharing websites, where a deceptive terminal command installs the malware silently on their devices. 3 sources 43

Extracted Entities

Malvertising Campaign Delivers AMOS ‘malext’ macOS Infostealer via Fake Text‑Sharing Lures

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (2)

Platforms (1)