Cookie Spider

COOKIE SPIDER (active since at least October 2018) develops and rents Atomic macOS Stealer (AMOS), an information stealer targeting macOS victims via multiple delivery methods, including search engine optimization (SEO) poisoning, fake job advertisements, and malicious VSCode extensions. In September 2024, the adversary began deploying an additional variant of AMOS that uses AppleScript at the sta...