The malware dropped in the new Google ads campaign is the Amos infostealer that targets data stored on web browsers, desktop wallets, and cryptocurrency extensions.
Google ad displays the legitimate Homebrew URL, but the ad redirects them to a fake Homebrew page that’s hosted as “brewe.sh” — tricking even the most careful users with the extra “e” letter.
Google ad displays the legitimate Homebrew URL, but the ad redirects them to a fake Homebrew page that’s hosted as “brewe.sh” — tricking even the most careful users with the extra “e” letter.
Quote:“Malware authors are targeting technical users, who are more likely to install tools like Homebrew, typically used by power users or developers,” said Jaron Bradley, director of Jamf Threat Labs. “These individuals are often in possession of high-value assets, such as cryptocurrency wallets or even sensitive work-related credentials."