Beware of Fake Browser Updates Targeting Mac Systems

The ClearFake campaign, previously targeting Windows systems, has expanded to target macOS systems with the Atomic Stealer malware. ClearFake utilizes compromised WordPress sites to deliver fraudulent web browser update notices, leading to the deployment of stealers and other malware. Atomic Stealer, a commercial malware family, is sold on a subscription basis and can siphon data from web browsers and cryptocurrency wallets. This development highlights the continued reliance of stealer malware on fake or poisoned installer files and other deceptive techniques for propagation. Additionally, the LummaC2 stealer has introduced a new feature that claims to gather persistent Google Account cookies, potentially enabling hackers to infiltrate accounts and perform significant attacks.