Hack Forums
Fake Homebrew site leverages Google ads to target macOS, Linux devices - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Fake Homebrew site leverages Google ads to target macOS, Linux devices (/showthread.php?tid=6290664)



Fake Homebrew site leverages Google ads to target macOS, Linux devices - Hackers - Jan 26, 2025

The malware dropped in the new Google ads campaign is the Amos infostealer that targets data stored on web browsers, desktop wallets, and cryptocurrency extensions.

Google ad displays the legitimate Homebrew URL, but the ad redirects them to a fake Homebrew page that’s hosted as “brewe.sh” — tricking even the most careful users with the extra “e” letter.

Quote:“Malware authors are targeting technical users, who are more likely to install tools like Homebrew, typically used by power users or developers,” said Jaron Bradley, director of Jamf Threat Labs. “These individuals are often in possession of high-value assets, such as cryptocurrency wallets or even sensitive work-related credentials."