Scammers use malicious ads and fake websites to lure potential victims. The information shaper is now known to be promoted under the name Arc browser installer.
If the user finds malicious advertising, they are redirected to the fake Airci website.[.]net is disguised as the official source of this browser. So the user downloads the fake installer “ArcSetup.dmg” which contains Atomic Stealer. When installing the Trojan, a window appears to enter the administrator password, after which the information thief can freely and silently steal data.
“An interesting nuance: You cannot go directly to a malicious site; In this case it will produce an error. Security researchers noted in the report that you can only access the resource through a special invitation link.
Source: Ferra
I am a professional journalist and content creator with extensive experience writing for news websites. I currently work as an author at Gadget Onus, where I specialize in covering hot news topics. My written pieces have been published on some of the biggest media outlets around the world, including The Guardian and BBC News.