


Perceptive Security
SOC/SIEM Consultancy

Google ads for shared ChatGPT, Grok guides push macOS infostealer malware
Published:
10 December 2025 at 23:50:56
Alert date:
11 December 2025 at 00:00:50
Source:
bleepingcomputer.com
A new AMOS infostealer campaign is exploiting Google search ads to trick users with fake Grok and ChatGPT conversation guides. The malicious ads appear in search results and lead users to websites that seem to offer helpful AI chatbot instructions. However, these sites ultimately deliver the AMOS information-stealing malware specifically targeting macOS systems. The campaign leverages users' interest in popular AI tools to distribute malware through seemingly legitimate educational content.
Technical details
Mitigation steps:
Affected products:
macOS
Google Ads
ChatGPT
Grok
Related links:
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
