Cybersecuritynews

Cybercriminals Use AI Chatbots and Google Ads to Distribute macOS AMOS Stealer

First seen 12 Feb 2026, 00:29 UTC • Gbhackers

•85% similarity •28.7

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Cybercriminals have launched an attack campaign utilizing ChatGPT and Grok alongside Google Ads to distribute the Atomic macOS Stealer (AMOS). This campaign targets Mac users by exploiting their trust in AI platforms, leading them to execute malicious software. The attack represents a significant advancement in social engineering techniques.

ThreatCluster AI How this analysis works

Timeline

2026-02-11

Cybercriminals launched campaign using AI chatbots and Google Ads

2026-02-11

Atomic macOS Stealer (AMOS) identified as the malware used

Attack Flow

9 entities, 11 inferred relationships (STIX 2.1).

Technique (3)

Malware
T1059 - Command and Scripting Interpreter
T1566.002 - Spearphishing Link

Malware (2)

AMOS
AMOS Stealer

Affected Platform (3)

MacOS
ChatGPT
Google Ads

Tool (1)

Grok

Relationships

Malware targets MacOS
Malware targets ChatGPT
Malware targets Google Ads
T1059 - Command and Scripting Interpreter targets MacOS
T1059 - Command and Scripting Interpreter targets ChatGPT
T1059 - Command and Scripting Interpreter targets Google Ads
T1566.002 - Spearphishing Link targets MacOS
T1566.002 - Spearphishing Link targets ChatGPT
T1566.002 - Spearphishing Link targets Google Ads
AMOS related to AMOS Stealer
AMOS related to Grok

Community

Browse all →

Tracked Entities in This Story

AMOS AMOS Stealer MacOS ChatGPT Google Ads

Cybercriminals Use AI Chatbots and Google Ads to Distribute macOS AMOS Stealer

Ask AI about this cluster

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story