Important Security Alert for MacOS Users
SHAMOS Malware Alert: What Mac Users and Businesses Need to Know
Between June and August 2025, over 300 organizations worldwide were targeted by a new type of malware called SHAMOS, a variant of the Atomic macOS Stealer.
This malware is designed to steal sensitive information from macOS computers, and it spreads in a way that can bypass built-in Mac security protections.
What SHAMOS Can Steal
If your Mac becomes infected, SHAMOS can capture:
Passwords stored in Keychain (your Mac’s saved website and app passwords)
Browser autofills, cookies, and saved credit card information
Cryptocurrency wallets, including Electrum, Binance, Exodus, Atomic, and Coinomi
Files and system details stored on your computer
How SHAMOS Spreads
SHAMOS is distributed through malvertising—fake ads that appear to offer helpful macOS tips or solutions. When users follow these ads and run a single line of code in Terminal (a built-in Mac command tool), the malware installs itself quietly, bypassing Apple’s normal security protections.
This means even tech-savvy users can accidentally infect their machines if they’re tricked by convincing fake sites or advertisements.
What You Should Do Now
If you’ve interacted with suspicious macOS help websites or run commands you didn’t fully understand, here’s what to do:
Stop using the affected Mac immediately and disconnect it from networks.
Change your passwords from a safe device, starting with Keychain, email, and financial accounts.
Check your cryptocurrency wallets for any unauthorized transactions.
Run a reputable malware scan or consult IT professionals to remove any infections.
Monitor sensitive accounts for unusual activity and keep backups of critical files.
How inWorks LLC Can Help
Understanding and responding to malware threats can be complicated—but you don’t have to do it alone. inWorks LLC provides professional IT support, intranet management, and proactive security solutions to keep your systems and data safe.
📩 If you’re unsure whether your Mac or business systems were affected, or how to protect them moving forward, contact inWorks LLC today. We’ll guide you through the steps to safeguard your technology and prevent costly security incidents.