AMOS Browser Extension Directory Enumeration for Crypto Wallet Theft

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•2

Detects the AMOS infostealer attempting to access and enumerate browser extension directories on macOS to harvest cryptocurrency wallet data from Chrome and Firefox profiles.