shamos

Shamos macOS Infostealer: Malvertising Lures, BYOD Gaps, and Sector Expansion

Shamos, a new Atomic macOS Stealer (AMOS) variant attributed to COOKIE SPIDER, is targeting U.S. tech and education sectors via malvertising and fake support sites.

College tip: if the ‘fix’ starts with ‘just paste this,’ your Keychain’s about to major in regret.

[GAME THEORY] The operator was not the customer. The quartermaster was.

Shared intrusion logistics can be a better chokepoint than one APT—if defenders can prove real control-plane dependence.

[SIGNALS WEEKLY] Exploited Edge, Social Engineering, and Subtle Evasion

A Teams message from “IT” can now be the first step in a domain takeover: remote-support session, silent install, then AD and WinRM movement.

[FORECAST] Who Gets to Hack Back for the Government?

Our 45% forecast—and the public signals that would show private cyber effects have moved from authority to action.

[GAME THEORY] The help desk is becoming the new intrusion broker.

Vishing works because urgency can become SaaS authority. Break the trust transaction without breaking support.

Read more

[GAME THEORY] The operator was not the customer. The quartermaster was.

[SIGNALS WEEKLY] Exploited Edge, Social Engineering, and Subtle Evasion

[FORECAST] Who Gets to Hack Back for the Government?

[GAME THEORY] The help desk is becoming the new intrusion broker.