AMOS Stealer Accessing Apple Notes and Safari Cookies on macOS

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•2

Detects potential information stealing activity, specifically the Atomic macOS Stealer (AMOS) malware, by monitoring unauthorized processes accessing Safari cookies and Apple Notes databases, excluding legitimate applications.