Search for adversaries

Cookie Spider

Details

COOKIE SPIDER (active since at least October 2018) develops and rents Atomic macOS Stealer (AMOS), an information stealer targeting macOS victims via multiple delivery methods, including search engine optimization (SEO) poisoning, fake job advertisements, and malicious VSCode extensions. In September 2024, the adversary began deploying an additional variant of AMOS that uses AppleScript at the sta...

Community Identifiers

zurahfHyvSpELqT

Objective

  • 5YiCvlDSz4jE2gs

Motivation

  • f7vmnM4r

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.

Unlock the adversary universe

Thank you for your request!

A member of our team will be in touch shortly.

CrowdStrike logo