Malware

AMOS

1 mentions in 7 days · 2 in 30 days · 2 total · first seen Aug 19, 2026 · last 4d ago

Timeline2 articles

Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware

Huntress analysts trace one X direct message into separate Mac and Windows malware chains delivering AMOS infostealer and NetSupport Manager RAT.

Huntress SOC analysts dissected a malware campaign distributed via an X direct message styled as a Google Docs sidebar. macOS users were routed to the AMOS infostealer, while Windows users received NetSupport Manager remote access malware. The write-up details how a single message branched into two distinct delivery paths per operating system.

HuntressSep 11, 16:36 UTC · 4d agoMalware in the wild 4 sources

Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware

Huntress uncovered post-DEF CON phishing via X direct messages using a malicious Google Doc to deliver AMOS and NetSupport RAT malware.

Huntress uncovered a phishing campaign targeting attendees after Black Hat and DEF CON. Attackers used X direct messages pointing to a malicious Google Doc as the delivery vehicle. Payloads include AMOS, a macOS infostealer, and the NetSupport RAT, among other malware.

HuntressAug 19, 13:00 UTC · 27d agoPhishing & fraud

Appears with

product Google Docs 2 vendor Huntress 2 malware NetSupport RAT 1 organization Huntress 1 product NetSupport Manager 1 product NetSupport RAT 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.