Fake Empire Podcast Invites Target Crypto Industry with macOS AMOS Stealer
Essential information
- Published
- 19/09/2025 10:47
- Modified
- 19/09/2025 11:14
- Tags
- 2025-09-19 amos stealer crypto empire podcast fake interviews huddle macos phishing streamyard
- Related entities
- 7 observables, 4 techniques (mitre), 1 malware, 2 others
Description
A new phishing campaign is targeting crypto industry developers and influencers with fake interview requests impersonating the popular Empire podcast. Attackers pose as hosts, luring victims to fraudulent websites mimicking platforms like Streamyard and Huddle. These sites prompt users to download a macOS application, which is actually the AMOS (Atomic macOS) Stealer malware. The infection chain involves a complex process of obfuscation and execution of hidden binaries. Once infected, victims risk exposing their digital lives to criminals, who can steal login credentials and other sensitive information. The campaign highlights the importance of caution when dealing with unsolicited requests and downloads from unknown sources.