Emerging Malware Threats Highlight Growing Risks to macOS and Linux Systems

Security researchers have identified two (2) sophisticated new malware threats that highlight the growing danger of social engineering and unpatched internet-facing systems. The first, AmnesiaStealer, targets macOS users through fake GitHub pages and deceptive ClickFix attacks, tricking victims into running malicious Terminal commands. Beyond stealing passwords, browser data, cryptocurrency wallet information, Apple Notes, documents, Safari cookies, and keychain credentials, it introduces a particularly alarming capability that allows attackers to remotely control a victim’s authenticated browser session in real time. Meanwhile, Evooo1Bot, an advanced Linux-based botnet derived from Mirai, exploits known vulnerabilities in routers, firewalls, cameras, and other edge devices to turn them into proxy servers for malicious activities. It also supports credential theft, brute-force attacks, remote command execution, file transfers, and large-scale DDoS operations while using encryption and anti-analysis techniques to avoid detection. Together, these threats reinforce the importance of strong cyber hygiene, including avoiding untrusted commands, staying alert to social engineering tactics, promptly applying security patches, removing default credentials, limiting remote access, and replacing unsupported hardware. CTIX analysts will continue to report on the latest malware strains and attack methodologies.