Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Collapse
Brand Logo
UDS UDS: $1.88
24h: 11.82%
Trade UDS
Gate.io
Gate.io
UDS / USDT
MEXC
MEXC
UDS / USDT
WEEX
WEEX
UDS / USDT
COINSTORE
COINSTORE
UDS / USDT
Biconomy.com
Biconomy.com
UDS / USDT
BingX
BingX
UDS / USDT
XT.COM
XT.COM
UDS / USDT
Uniswap v3
Uniswap v3
UDS / USDT
PancakeSwap v3
PancakeSwap v3
UDS / USDT

Earn up to 50 UDS per post

Post in Forum to earn rewards!

Learn more
UDS Right

Spin your Wheel of Fortune!

Earn or purchase spins to test your luck. Spin the Wheel of Fortune and win amazing prizes!

Spin now
Wheel of Fortune
selector
wheel
Spin

Paired Staking

Stake $UDS
APR icon Earn up to 50% APR
NFT icon Boost earnings with NFTs
Earn icon Play, HODL & earn more
Stake $UDS
Stake $UDS
UDS Left

Buy UDS!

Buy UDS with popular exchanges! Make purchases and claim rewards!

Buy UDS
UDS Right

Post in Forum to earn rewards!

UDS Rewards
Rewards for UDS holders
Rewards for UDS holders (per post)*
  • 100 - 999 UDS: 0.05 UDS
  • 1000 - 2499 UDS: 0.10 UDS
  • 2500 - 4999 UDS: 0.5 UDS
  • 5000 - 9999 UDS: 1.5 UDS
  • 10000 - 24999 UDS: 5 UDS
  • 25000 - 49999 UDS: 10 UDS
  • 50000 - 99 999 UDS: 25 UDS
  • 100 000 UDS or more: 50 UDS
*

Rewards are credited at the end of the day. Limited to 5 payable posts per day, 50 K holders - 3 posts per day, 100K holders - 2 posts per day. Staked UDS gives additional coefficient up to X1.5

  1. Home
  2. Crypto-Detective
  3. [WARNING] AMOS Malware Just Got a Major Upgrade – Now With Full Remote Access Capabilities

[WARNING] AMOS Malware Just Got a Major Upgrade – Now With Full Remote Access Capabilities

Scheduled Pinned Locked Moved Crypto-Detective
40 Posts 15 Posters 358 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
This topic has been deleted. Only users with topic management privileges can see it.
  • J Offline
    J Offline
    Jibon_RX
    wrote on last edited by
    #13

    Just did a quick LaunchDaemon audit and found some weird stuff—this post probably saved me from something worse.

    1 Reply Last reply
    0
    • D Offline
      D Offline
      Dave
      wrote on last edited by
      #14

      This is why I always tell my friends in Web3: if it sounds too good to be true, it probably is. Stay sharp, folks.

      1 Reply Last reply
      0
      • S Offline
        S Offline
        Smith
        wrote on last edited by
        #15

        Can’t believe how fast malware like AMOS evolves. Remote access even after reboot? That’s next level terrifying.

        J 1 Reply Last reply
        0
        • S Smith

          Can’t believe how fast malware like AMOS evolves. Remote access even after reboot? That’s next level terrifying.

          J Offline
          J Offline
          Jibon_RX
          wrote on last edited by
          #16

          @Smith
          Thanks for breaking it down clearly. Gonna rethink opening any random collab emails I’ve been getting lately.

          1 Reply Last reply
          0
          • lingriidddL lingriiddd

            apple.webp

            Hey everyone,
            Just a heads-up about something nasty floating around — AMOS (a.k.a. Atomic macOS Stealer) just leveled up big time. Originally it was mainly grabbing crypto wallets and passwords, but now it’s got a remote access module that basically lets attackers take over your system like it’s their own. Yup, full control — even after a reboot.

            Researcher g0njxa broke down the latest version, and here’s what it can do now:

            🔹 Executes attacker commands directly on your machine
            🔹 Hides from analysis in virtual machines/sandboxes
            🔹 Auto-launches every time your Mac boots up
            🔹 Drops hidden .helper and .agent files, launched via LaunchDaemon with system-level privileges 😨

            That means the attackers can:

            — Install even more malware
            — Log your keystrokes
            — Pivot deeper into your network

            AMOS has been around since at least 2023, but it started off spreading through cracked apps. Now it’s being used in targeted phishing attacks, especially against freelancers and crypto holders. Victims are getting fake job offers or collab requests with weaponized attachments.

            🌍 The latest wave has already hit users in 120+ countries, including the US, Canada, UK, Italy, France, and more.

            TL;DR: If you’re getting random "job offers" with attachments or are working in crypto/web3 — be very careful right now. And maybe audit your LaunchDaemons while you’re at it.

            Stay safe out there.
            #crypto #coin #cryptocurrency #AMOS

            M Offline
            M Offline
            MD SANI
            wrote on last edited by
            #17

            @lingriiddd Auditing LaunchDaemons and checking for suspicious .helper or .agent files is a must right now. The fact that AMOS can bypass sandbox detection shows how advanced it’s become. Mac users really need to stay extra cautious these days

            1 Reply Last reply
            0
            • N Offline
              N Offline
              Nayeem Islam
              wrote on last edited by
              #18

              Thanks for sharing this important update. It’s scary how these fake job offers are now being used to target freelancers and crypto users. If something feels off, don’t open the file — report and delete it right away. Better to stay safe than sorry!

              1 Reply Last reply
              0
              • J Offline
                J Offline
                Jibon_RX
                wrote on last edited by
                #19

                Wow, this AMOS update is scary. Thanks for the heads-up—really need to double-check my Mac's security settings now.

                1 Reply Last reply
                0
                • S Offline
                  S Offline
                  Smith
                  wrote on last edited by
                  #20

                  Appreciate this info! It’s crazy how these attackers keep finding new ways to exploit users, especially in the crypto space.

                  D 1 Reply Last reply
                  0
                  • D Offline
                    D Offline
                    Dave
                    wrote on last edited by
                    #21

                    Honestly, this is one of the most useful warnings I’ve seen today. Time to be paranoid for the right reasons.

                    1 Reply Last reply
                    0
                    • J Offline
                      J Offline
                      Jibon_RX
                      wrote on last edited by
                      #22

                      Appreciate the reminder to stay vigilant. These attackers are ruthless, and we have to protect ourselves.

                      1 Reply Last reply
                      0
                      • D Offline
                        D Offline
                        Dave
                        wrote on last edited by
                        #23

                        Crazy how malware campaigns have gone global so fast—120+ countries already??

                        S 1 Reply Last reply
                        0
                        • D Dave

                          Crazy how malware campaigns have gone global so fast—120+ countries already??

                          S Offline
                          S Offline
                          Smith
                          wrote on last edited by
                          #24

                          @Dave
                          I wish more people took these warnings seriously. Prevention is much easier than dealing with an infected system.

                          J 1 Reply Last reply
                          0
                          • S Smith

                            @Dave
                            I wish more people took these warnings seriously. Prevention is much easier than dealing with an infected system.

                            J Offline
                            J Offline
                            Jibon_RX
                            wrote on last edited by
                            #25

                            @Smith
                            Big thanks to researchers like g0njxa who help us understand threats like this.

                            1 Reply Last reply
                            0
                            • N Offline
                              N Offline
                              Nahiar806
                              wrote on last edited by
                              #26

                              LaunchDaemons are no joke — once malware gets in there with root privileges, it’s game over. Everyone on macOS should audit theirs ASAP.

                              1 Reply Last reply
                              0
                              • A Offline
                                A Offline
                                alex
                                wrote on last edited by
                                #27

                                These attackers are getting way too sophisticated. Remote access + persistence = nightmare fuel

                                1 Reply Last reply
                                0
                                • M Offline
                                  M Offline
                                  Maxwell
                                  wrote on last edited by
                                  #28

                                  Freelancers are such easy targets now. If someone sends you a DM about a 'collab' and there's a file attached — assume it’s malicious

                                  1 Reply Last reply
                                  0
                                  • rafihasanR Offline
                                    rafihasanR Offline
                                    rafihasan
                                    wrote on last edited by
                                    #29

                                    One more reason to stop downloading cracked software. That free plugin might just cost you your wallet

                                    1 Reply Last reply
                                    0
                                    • J Offline
                                      J Offline
                                      Jibon_RX
                                      wrote on last edited by
                                      #30

                                      Crypto and macOS users need to be on high alert. These phishing tactics are getting too real.

                                      1 Reply Last reply
                                      0
                                      • S Smith

                                        Appreciate this info! It’s crazy how these attackers keep finding new ways to exploit users, especially in the crypto space.

                                        D Offline
                                        D Offline
                                        Dave
                                        wrote on last edited by
                                        #31

                                        @Smith
                                        Definitely going to stop downloading cracked apps altogether. Not worth the risk anymore.

                                        1 Reply Last reply
                                        0
                                        • S Offline
                                          S Offline
                                          Smith
                                          wrote on last edited by
                                          #32

                                          This is the kind of info that needs to be spread in every crypto community right now.

                                          1 Reply Last reply
                                          0


                                          Powered by NodeBB Contributors
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups