Malvertising Campaign Distributes AMOS ‘malext’ Infostealer to macOS Users

Malvertising Campaign Distributes AMOS ‘malext’ Infostealer to macOS Users

First seen 3 Mar 2026, 13:11 UTC •GbhackersCybersecuritynewsCyberpress •83% similarity •43.1

Article Content

Browse articles
ThreatCluster

A malvertising campaign has emerged, targeting macOS users globally with a new variant of the AMOS infostealer known as 'malext.' Attackers are utilizing Google ads to direct victims to fake help articles on text-sharing websites, where a deceptive terminal command installs the malware silently on their devices.

ThreatCluster AI

Timeline

2026-03-03
Malvertising campaign identified delivering AMOS 'malext' infostealer
Date unknown
Attackers purchase Google ads for fake help articles
Date unknown
Deceptive terminal command installs malware on macOS devices

Extracted Entities

1 / 2

Community

Browse all →