MALWARE TRAFFICS  H  ARTICLES  CONFERENCE  MALWARE TRAFFICS


DATE NAME INFO CATEGORIE WEB

6.10.26

ATOMIC MACOS (AMOS) STEALER INFECTION FROM MALICIOUS AD IMPERSONATING CLAUDE CODE

Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website. MALWARE TRAFFICS MALWARE TRAFFIC

26.9.26

A Closer Look at Malware From the Macfinger ClickFix Campaign My previous post on Macfinger ClickFix was two days ago, and this campaign remains active. The more I look into the malware delivered by this campaign, the more I believe it is not a variant of Atomic macOS (AMOS) Stealer as originally reported. There are too many differences between what I've documented with recent AMOS Stealer activity and what I'm now seeing with this malware. The data collection and method of exfiltration is different between these two malware families. MALWARE TRAFFICS MALWARE TRAFFIC

21.9.26

2026-09-14 (MONDAY): BACKDOOR USING SCREENCONNECT FROM MALICIOUS EMAIL Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website. MALWARE TRAFFICS MALWARE TRAFFIC

21.9.26

2026-09-15 (TUESDAY): SMARTAPESG CLICKFIX TO UNIDENTIFIED RAT TO MESHAGENT Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website. MALWARE TRAFFICS MALWARE TRAFFIC
11.9.26 ATOMIC MACOS (AMOS) STEALER INFECTION Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website. MALWARE TRAFFICS MALWARE TRAFFIC
11.9.26 XWORM INFECTION Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website. MALWARE TRAFFICS MALWARE TRAFFIC
5.9.26

ESSENTIAL MACOS STEALER INFECTION

Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website. MALWARE TRAFFICS MALWARE TRAFFIC
23.8.26 (FRIDAY): SMARTAPESG CLICKFIX CAMPAIGN LEADS TO TWO RATS Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website. malware-traffic-analysis malware-traffic-analysis
13.8.26 (WEDNESDAY): SMARTAPESG CLICKFIX LEADS TO TWO RATS Zip files are password-protected. Of note, this site has a new password scheme. For the password, see the "about" page of this website. malware-traffic-analysis malware-traffic-analysis
11.8.26

LUMMA STEALER OR VARIANT

Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website. malware-traffic-analysis malware-traffic-analysis