216.73.216.78

Self-Proclaimed Meeting Software Vortax Spreads Infostealers, Unveils Expansive Network of Malicious macOS Applications

· Published 20/06/2024 12:26 · Modified 20/06/2024 12:42

Export JSON

Essential information

Published
20/06/2024 12:26
Modified
20/06/2024 12:42
Tags
2024-06-20 c2 macos
Related entities
60 observables, 2 techniques (mitre), 4 malware

Description

While monitoring data in Recorded Future Malware Intelligence, Insikt Group identified purported virtual meeting software called Vortax that, upon download and installation, delivers three information stealers (“infostealers”) in cross-platform attacks — Rhadamanthys, Stealc, and, most notably, Atomic Stealer (AMOS) — in an extensive campaign aimed at cryptocurrency theft.

External references