January 23rd, 2025

A cyberattack campaign is using a fake Homebrew site promoted through Google ads to distribute the Amos infostealer malware to macOS and Linux users. The campaign redirects users from a legitimate-looking Homebrew ad to a fake site, "brewe.sh". This malware targets technical users likely to use Homebrew who may have cryptocurrency wallets or sensitive work credentials. A vulnerability in the 7-Zip file archiver can also allow attackers to bypass Windows security warnings by crafting archives that do not properly apply the Mark of the Web (MotW) metadata, potentially leading to the installation of malware. Users must manually update to version 24.09 to fix this issue. Additionally, a hacker claims to have stolen the data of 62.4 million students and 9.5 million teachers from PowerSchool, an education technology company. The breach occurred after the threat actor gained access to the company's customer support portal using stolen credentials. PowerSchool will provide two years of complimentary identity protection and credit monitoring services to those impacted.