Atomic macOS Stealer (AMOS) is increasingly targeting business users through social engineering and fake installers. In this blog, Red Squid
Agenda IntroductionWhy macOS is no longer a low‑visibility platform for attackers. 25-minute Analyst Walkthrough: A real macOS malware incident investigated by the SOC, from the H2 2025 Threat Findings Report, showing how the threat entered, executed, and was contained: Triojanised software and user-led execution Abuse of trusted platforms and native macOS
Adenda Introduction 25-minute Analyst Walkthrough: Two Real SOC Detections of Credential Theft from the H2 2025 Threat Findings Report. Trojanised PuTTY Infostealer ClickFix Social Engineering Script Lessons Learned: What to Apply in Your Environment What you’ll learn How modern credential theft attacks bypass users and tools. The signals that expose