Threat Actors Weaponize ChatGPT and Grok Conversations to Deploy AMOS Stealer

Cybersecuritynews •Guru Baran • December 10, 2025

Threat actors are now leveraging the trust users place in AI platforms like ChatGPT and Grok to distribute the Atomic macOS Stealer (AMOS). A new campaign discovered by Huntress on December 5, 2025, reveals that attackers have moved beyond mimicking trusted brands to actively utilizing legitimate AI services to host malicious payloads. The infection chain […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Threat Actors Exploit AI Platforms to Distribute AMOS Stealer Threat actors are utilizing AI platforms like ChatGPT and Grok to distribute the Atomic macOS Stealer (AMOS). A campaign discovered by Huntress on December 5, 2025, indicates that attackers are leveraging user trust in these AI services to host malicious payloads. 2 sources 33

Extracted Entities

Threat Actors Weaponize ChatGPT and Grok Conversations to Deploy AMOS Stealer

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (2)

Tools (1)