Shamos

Shamos Mac Infostealer Spreads Through ClickFix Lures, CrowdStrike Warns

CrowdStrike attributes the AMOS variant to COOKIE SPIDER, detailing a one-line Terminal technique that bypasses Gatekeeper.