Archive · 19 Dec 2025
Hackers Use ChatGPT Ads to Spread Mac Malware
Hackers are tricking Mac users into downloading a harmful program called AMOS.
They do this by showing fake ads on Google and creating fake guides on the ChatGPT website.
These guides tell users to type a special code into their Mac's Terminal, which then downloads the harmful program.
Once installed, the program steals passwords, cookies, and information from cryptocurrency wallets.
This is part of a bigger trend where hackers are using AI-related tricks to spread malware.
Experts warn users to be careful and not follow instructions from unknown sources.
Hackers use paid Google ads and fake ChatGPT guides to trick Mac users into downloading AMOS malware.
The malware is installed via a command that users are tricked into running in the Terminal.
AMOS steals passwords, cookies, and cryptocurrency wallet data from infected Macs.
The attack method is a variation of the ClickFix technique, where users manually execute harmful commands.
This campaign is part of a growing trend of infostealers using AI-related themes to deceive users.
- Who
- Hackers targeting macOS users
- What
- Malware campaign using AMOS infostealer
- When
- Reported on December 19, 2025
- Where
- Global, via Google search ads and ChatGPT.com
- Why
- To steal sensitive data and install persistent backdoors
- Malware Type
- AMOS (Atomic macOS Stealer)
- Attack Method
- ClickFix technique
- Target Platform
- macOS
- Data Targeted
- Passwords, cookies, cryptocurrency wallets
- Source of Attack
- Paid Google search ads and ChatGPT.com
- Date Reported
- December 19, 2025