ChainCatcher news, SlowMist Technology Chief Information Security Officer 23pds posted on X that a variant of the AMOS information-stealing trojan, Odyssey, is currently distributing fake AI tool advertisements through channels such as Twitter, luring users to download malicious software disguised as AI tool clients.
It uses AppleScript scripts as the main payload to steal sensitive data such as system information, browser data, and cryptocurrency wallet information.