
AmnesiaStealer malware grants attackers live control of macOS browser sessions
Jamf Threat Labs identified AmnesiaStealer, a new macOS infostealer that uses ClickFix social engineering to install a Rust-based payload. Beyond stealing credentials and data, the malware features a 'stream_module' that clones victim browser profiles into hidden, headless instances. This allows attackers to interactively control authenticated sessions via the Chrome DevTools Protocol, bypassing traditional file-collection limitations.
