{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreiaaf6smgkjdcmwa7an4pcuy4b2pwdtgjpw5yngms7gffyupin3iza",
    "uri": "at://did:plc:6wtxqaikjf62unmnajbfbq5v/app.bsky.feed.post/3mg7hcqvkey32"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreiak4gogzoed5y5vwkkhjy5sfomn6p5w56zpp2az2ysj3htpxnpx3e"
    },
    "mimeType": "image/webp",
    "size": 161620
  },
  "path": "/malvertising-campaign-tricks-mac-users-into-installing-amos-infostealer-through-fake-how-to-pages/",
  "publishedAt": "2026-03-03T14:12:11.000Z",
  "site": "https://vpncentral.com",
  "tags": [
    "News",
    "Malvertising campaign tricks Mac users into installing AMOS infostealer through fake “how-to” pages",
    "VPN Central"
  ],
  "textContent": "Attackers now use Google Search ads to lure macOS users onto fake help pages that tell them to paste a Terminal command. When the victim runs the command, it pulls down a script and installs an infostealer, including Atomic macOS Stealer (AMOS), also known as Atomic Stealer. Microsoft says these “ClickFix” copy-paste prompts have hit […]\n\nThe post Malvertising campaign tricks Mac users into installing AMOS infostealer through fake “how-to” pages appeared first on VPN Central.",
  "title": "Malvertising campaign tricks Mac users into installing AMOS infostealer through fake “how-to” pages"
}