Summary
- Jamf Threat Labs observed AmnesiaStealer spreading through a ClickFix-style counterfeit GitHub download page.
- The Rust-based malware steals Keychain, browser, Apple Notes, and Telegram data before optionally loading a browser-control module.
- Its final stage can give an operator hidden interactive control of a cloned Chromium profile and its authenticated sessions.
A macOS information stealer observed in active campaigns can go beyond collecting credentials and cookies by giving its operator interactive control of a victim’s authenticated browser environment.
Jamf Threat Labs calls the malware AmnesiaStealer and says it is being distributed through a counterfeit GitHub download page using the increasingly common ClickFix social-engineering technique.
Instead of serving a normal installer, the fake page instructs users to copy a command into Terminal. That command retrieves a shell script which downloads and executes the malware.
The infection then operates in stages. A Rust-based stealer gathers macOS account information, Keychain data, browser information, Apple Notes, Telegram data, and other files. A separate module can subsequently be downloaded on command to provide the attacker with hidden interactive access to the browser.
That second capability changes the risk model associated with conventional infostealers. Credential theft usually gives an attacker material that can be reused elsewhere — passwords, cookies, tokens, or stored session information. Interactive browser control allows the operator to work inside a browser profile that is already authenticated and resembles the victim’s normal environment.
Jamf says the streaming module clones a Chromium profile and operates through the Chrome DevTools Protocol. The browser can be launched headlessly while the attacker interacts with the session remotely.
The technique can preserve context that disappears when a password is simply copied to another system. Existing sessions, browser storage, trusted-device state, and application-specific authentication can all influence whether an online service treats a request as legitimate.
It also complicates detection. A fraudulent login from an unfamiliar device or geography can produce a strong identity-risk signal. Activity originating from the same compromised endpoint and browser state can look closer to normal user behaviour, even though the human behind the actions has changed.
AmnesiaStealer still requires initial execution, and its infection chain relies heavily on social engineering. The counterfeit GitHub page asks the victim to run Terminal commands rather than exploiting GitHub or macOS remotely.
Jamf also found that some of the malware’s attempts to bypass Apple’s Transparency, Consent, and Control protections relied on vulnerabilities that Apple patched years ago. Those techniques therefore do not operate uniformly on fully updated systems.
The remote browser module is the more durable part of the design. Attackers increasingly target authenticated state because stronger password controls and multi-factor authentication make simple credential replay less reliable.
The same shift is visible in adversary-in-the-middle phishing, browser cookie theft, token replay, and information-stealing malware that prioritises session stores alongside passwords. Browser-level control takes that logic further by retaining the environment that created the session in the first place.
For organisations using Macs for access to SaaS platforms, cloud administration, developer environments, finance systems, and internal applications, the endpoint and identity layers consequently become difficult to separate. A compromised endpoint can carry valid sessions into applications whose own authentication mechanisms have not technically failed.
Jamf says it has observed AmnesiaStealer in the wild and continues to track related infrastructure and variants. The malware is another indication that the information-stealer market is moving beyond bulk credential harvesting towards mechanisms that let operators exploit live authenticated activity directly.
