Poseidon malware menaces Mac users via GoogleAds

A new MacOS malware named 'Poseidon' is targeting users through Google ads, posing as links to download the Arc web browser. Once clicked, users are redirected to a fake site offering a trojan download instead. The malware aims to steal user account credentials and VPN configurations for data theft or resale. Researchers believe these attacks are the initial phase of a potential malware-for-hire service. The malware, identified as OSX.RodStealer, is designed to mimic the notorious AtomicStealer malware family and offers various functionalities like file grabbing, crypto wallet extraction, and password manager stealing. Malwarebytes advises Mac users to be cautious of their application sources and avoid suspicious sites or unsigned installers to prevent infection. The rise of info-stealing trojans for MacOS indicates a growing trend among cybercriminals targeting sensitive data like account credentials, crypto wallet keys, and VPN access configurations. Vigilance during app downloads is crucial to stay protected against evolving threats like Poseidon.