Gatekeeper

Reported Context (2)

The .dmg file contains an ad-hoc signed application bundle and the instructions ask the user to bypass Apple's built-in macOS Gatekeeper feature, allowing it to run on the compromised system. Post-DEF CON Phishing Lures Deliver AMOS Stealer, NetSupport RAT and Other Malware
macOS Endpoint Hardening: Enforce system integrity protections and restrict execution of unsigned scripts using tools like Gatekeeper and MDM policies. ClickFix Campaign Uses Spectrum-Themed Sites to Deliver AMOS to macOS Users

Malware (5)

People (8)

MITRE ATT&CK (24)

Vendors (5)

Products (10)

Tools (2)

Industries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.