Read-only scanner that checks a Mac for AMOS / Atomic / SHAMOS infostealer indicators — launchd persistence, dropped files, C2, wallet tampering. No network, no sudo, no writes. Built by an infection survivor.
macos incident-response security-tools malware-detection amos macos-security infostealer atomic-stealer
-
Updated
Jun 15, 2026 - Shell