New AmnesiaStealer macOS malware hijacks browser sessions via remote control

One new malware strain is targeting macOS users. The malware, dubbed AmnesiaStealer, hijacks browser sessions on Safari and Chrome by exploiting fake GitHub downloads. It enables attackers to remotely control browser sessions, potentially accessing sensitive data stored in the Keychain. The malware's ability to gain live control of browser sessions is particularly concerning.

AppleInsider, The Hacker News, TechRepublic, csoonline.com and BleepingComputer have all covered the story. AppleInsider notes that the malware tricks users into downloading it via fake GitHub links. The Hacker News and TechRepublic both emphasize the malware's capability to hijack Chromium-based browsers. BleepingComputer and csoonline.com both use the term "remote control" to describe the malware's functionality.

Users of macOS devices who have downloaded software from GitHub recently are at risk. The malware's method of infection involves disguising itself as a legitimate download. Users should verify the authenticity of downloads and monitor their browser activity for any unusual behavior. Apple has not yet commented on the malware or released a patch.