AmnesiaStealer: New macOS Malware Shows Depth

Security researchers have uncovered a new macOS infostealer distributed via ClickFix-style social engineering attacks, according to a report from Jamf. Dubbed AmnesiaStealer, the malware is written in Rust and has evolved to include macOS-specific features that set it apart from other known stealers.

ClickFix Lure Tricks Users

AmnesiaStealer is distributed through a counterfeit GitHub download page that presents a 'Terminal installation' box, framed as a convenience for advanced users. The lure provides numbered instructions to open and install Terminal, preying on users' desire to fix problems themselves rather than alerting their IT team.

If the user clicks the 'copy' button, a base64 blob is produced which decodes to a single command. This command retrieves a script that is short, silent and self-deleting. The script then executes the AmnesiaStealer binary.

Stealthy Data Exfiltration

Once running, AmnesiaStealer begins by 'muting' the device's sound system to hide its data theft activities. This is because part of the data collection runs through Finder, which plays a sound on each file it duplicates. It also performs reconnaissance across software, hardware and display data types.

The malware first harvests data from Apple Notes and Telegram, writing commands that ensure it avoids triggering a macOS permission (TCC) prompt. It then prompts the victim to enter their password, which, when entered, is validated locally. These credentials are used to unlock data-protection keychain files that hold encrypted records.

Remote Browser Control

AmnesiaStealer also contains a remote-controlled second stage, which gives the operator hidden, interactive control of the victim's browser. The module supports seven Chromium-family browsers, which include Chrome, Brave, Microsoft Edge, Arc, Opera, Vivaldi and Chromium.

This activity remains invisible to the user because before launch the module clones the victim profile. Control is taken over the copy, meaning that the victim's own visible browser is not affected. The operator receives a live screencast of the session and can drive it using a full input set of keyboard, mouse, scroll, navigation and tab management.

Novel macOS-Specific Features

While AmnesiaStealer's objectives overlap with other macOS infostealers such as Atomic (AMOS), MacSync and CrashStealer, the researchers noted that AmnesiaStealer has macOS-specific capabilities that make it a novel threat. It contains OS version-branched logic that reaches for macOS bypasses that have been patched by Apple.

The Jamf report, published on August 13, highlighted the attackers' use of ClickFix to distribute AmnesiaStealer to mac users. Research has shown that ClickFix has become a leading means of malware delivery in 2026. The tactic bypasses many anti-virus and cyber defense tools that categorise the action as legitimate.

Protection and Mitigation

Jamf advised macOS users to configure threat prevention, advanced threat controls and web protection to Block and Report to help prevent the execution of similar threats. These measures can help block malicious scripts and detect suspicious behavior.

AmnesiaStealer is particularly adept at maintaining stealth during its activities, making detection difficult. The ClickFix lure template is shared across multiple macOS infostealer families, suggesting a common distribution infrastructure.

Why It Matters

This discovery suggests that macOS infostealers are becoming more sophisticated, with attackers investing in stealth and remote control capabilities that were previously less common on the platform. The use of ClickFix indicates that social engineering remains a primary vector for delivering malware, even on systems with strong built-in security. For organizations and individual users, the takeaway is clear: vigilance against social engineering and robust endpoint protection are essential to defend against evolving threats like AmnesiaStealer.