Researchers disclose a new macOS malware, AmnesiaStealer, designed to steal information from victims and hijack web browser sessions. The threat targets macOS users using ClickFix-style social engineering and includes a module that enables interactive control of the victim’s browser session, while attempting to collect session-related data.
Reports say the malware is written in Rust and is distributed through a deceptive download flow that mimics a GitHub “Download for macOS” page. The lure is presented as if it comes from a legitimate or verified publisher, with researchers describing it as a multi-stage information stealer. Bleeping Computer and Hacker News both emphasize the browser hijacking capability—particularly against Chromium-based browsers—though the outlets focus on different aspects of the delivery and the mechanics of remote, live browser interaction.
