Threat Intelligence / Actor / Unknown (multiple operators / MaaS distribution)

Unknown (multiple operators / MaaS distribution)

1 tracked threat(s) · Categories: MALWARE

Also known as: ClickFix macOS Trio, SHub Stealer operators, AMOS Helper Campaign, Macsync Stealer operators

Tracked threats

ClickFix macOS Trio: Loader/Script/Helper Campaigns Deliver SHub Stealer, AMOS, and Macsync Stealer with Trojanized Ledger/Trezor/Exodus Wallets and GoogleUpdate-Masqueraded Persistence — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence