If you own a macOS device, you might think you're immune to many of the threats that often target Windows users. However, a new AMOS infostealer campaign is showing that macOS users are not as safe as they might believe. This threat is cleverly masked within seemingly helpful Google ads directing users to fake ChatGPT and Grok conversations. Once engaged, these ads can lead to the installation of malware that targets your most sensitive data.
What Datapoints Were Leaked?
When AMOS hits your macOS device, it’s not just poking around for your run-of-the-mill files. The infostealer is after the good stuff — the kind of data you never want in the wrong hands.
What AMOS Collects
Passwords: Saved passwords from browsers and apps are top targets. This means login credentials for your emails, shopping sites, and social accounts can all be scooped up in seconds.
Financial Information: If you’ve saved your credit card numbers or banking details in autofill or password managers, AMOS is designed to extract them.
Browser Cookies and Autofill Data: Ever relied on your browser to remember things like addresses or logins? Those cookies and autofill entries are harvested, giving attackers a window into your browsing habits and access points.
Cryptocurrency Wallet Data: AMOS doesn’t stop at traditional financial info. It scans your system for crypto wallets from popular apps, making any digital assets fair game.
Why Does This Matter?
Losing passwords can lock you out. Exposed financial data can drain your accounts. But it’s the mix — passwords, cookies, autofill, and wallets — that makes AMOS a real threat. With all these pieces, an attacker can impersonate you online, drain your funds, or sell your info on the dark web.
If you’re thinking your Mac’s built-in security will catch this — AMOS is built to slip past those defenses, especially when disguised behind convincing Google ads and fake ChatGPT links. Staying alert is more important than ever.
Should You Be Worried?
It’s easy to think, “I haven’t clicked anything weird, so I’m safe.” But with threats like the AMOS Infostealer targeting macOS users, that confidence might be misplaced. Even if you haven’t fallen for a suspicious link, your personal data is still at risk.
The Hidden Risks to Your Data
You don’t need to be tech-savvy to understand the risks. AMOS Infostealer is a piece of malware specifically designed to steal sensitive information from macOS devices. Here’s what you need to know:
It can snatch passwords, credit card details, and even your browser history—quietly, in the background.
You might not even realize it’s there. Unlike old-school viruses that make your computer act up, info-stealers like AMOS are designed to be invisible until it’s too late.
Your data could be sold on the dark web or used for identity theft, putting your privacy and financial security in jeopardy.
Why Staying Informed Matters
Even if you’ve never clicked a shady link, here’s why you should care:
Data breaches don’t always start with you. Your information could be exposed if a site you use gets hacked, or if someone in your contacts falls for a scam.
Hackers keep finding new tricks. AMOS and similar threats are constantly updated to bypass the latest security measures.
The aftermath is messy. Cleaning up after a data breach can mean lost money, damaged credit, or hours spent resetting accounts.\
Protecting Yourself Isn’t Just for the Tech-Savvy
You don’t need to be a security expert to take action. Staying alert, using strong passwords, and not reusing them across sites makes a real difference. This is where solutions like Cloaked can help—by creating secure, disposable emails and phone numbers, you add an extra layer between your real identity and the outside world. It’s a practical way to reduce the risk, especially as threats like AMOS become smarter and harder to spot.
Bottom line: You don’t have to be a hacker’s target to be a victim. Staying educated—and using the right tools—keeps your information safer.
What Should Be Your Next Steps?
Securing your macOS device isn’t just a good habit—it’s the shield between your personal data and the wild west of the internet. If you’re wondering where to start, here’s a no-nonsense checklist to help you lock things down.
1. Check Your Security Settings
Think of your macOS settings as the front door to your digital house. If the lock is flimsy, anyone can walk in.
Enable FileVault: This encrypts your hard drive, making your files unreadable to anyone without your password.
Set a Strong Password: Ditch “password123.” Use a combination of uppercase, lowercase, numbers, and symbols.
Turn on Firewall: Go to System Settings > Network > Firewall and make sure it’s switched on. This blocks unwanted incoming connections.
Limit App Permissions: Only allow apps to access your camera, microphone, and files when it’s necessary.
2. Keep Your System and Software Updated
Those update notifications? They’re not just nagging you. Updates often patch security holes.
Automatic Updates: Set your macOS and apps to update automatically.
Check for Updates Regularly: Don’t wait for reminders—get in the habit of checking.
3. Use Trusted Antivirus Software
Even though macOS has built-in protections, malware can still sneak through. Don’t rely on luck.
Pick a Reputable Antivirus: Look for software with strong reviews and regular updates.
Schedule Regular Scans: Set it and forget it—let your antivirus check your system on a schedule.
4. Beware of Phishing and Suspicious Links
No antivirus can save you from clicking the wrong link. Stay alert.
Double-check URLs: If something looks off, it probably is.
Don’t Download from Unknown Sources: Stick to the Mac App Store or verified developers.
5. Secure Your Online Accounts
One weak password can topple your digital life.
Enable Two-Factor Authentication: Wherever possible, add this extra layer.
For those wanting more than standard macOS tools, consider solutions like Cloaked. It’s designed to give you an added buffer against digital threats. Cloaked focuses on safeguarding your personal information by generating secure aliases for your emails, phone numbers, and usernames, reducing the risk of your real data being exposed during breaches or phishing attempts. If keeping your identity and personal information private is a top priority, Cloaked’s approach adds a meaningful layer to your defense strategy.
Taking these steps is a statement: your data matters. The digital world won’t get safer on its own, but you can make your slice of it a lot harder to crack.
At Cloaked, we believe the best way to protect your personal information is to keep it private before it ever gets out. That’s why we help you remove your data from people-search sites that expose your home address, phone number, SSN, and other personal details. And to keep your info private going forward, Cloaked lets you create unique, secure emails and phone numbers with one click - so you sign up for new experiences without giving away your real info. With Cloaked, your privacy isn’t a setting - it’s the default. Take back control of your personal data with thousands of Cloaked users.
*Disclaimer: You agree not to use any aspect of the Cloaked Services for FCRA purposes.
