Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware

As cited

Copy frozen at 2026-09-11 21:53 UTC (site build).

threat intel

Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware

A single malicious Google Docs message distributed via X direct message triggered different malware payloads depending on the recipient's operating system: AMOS stealer on macOS and NetSupport Manager on Windows. Huntress security analysts documented the attack chain and payload differentiation across platforms.

Why it matters: Mac and Windows users are both targeted by this campaign; practitioners should review X-based social engineering defenses and monitor for AMOS stealer and NetSupport Manager indicators of compromise (IOCs) on affected endpoints.

Source published

2026-09-15 13:00 UTC

First seen by Cybersecurity Tracker

2026-09-11 21:30 UTC