The Forbidden Fruit: How Info Stealers Take a Byte Out of macOS

Charlie Cullen | Maddie Stewart

The early 2023 release of AMOS, a commodity information stealer targeting macOS, led to an explosion of macOS stealer variants being sold by eCrime actors. This talk will trace the emergence of AMOS, the rise of competitors’ macOS information stealers in 2024 and 2025, and current delivery trends. The talk will also include a discussion of the places these tools have in the broader eCrime ecosystem.