As cited
Copy frozen at (site build).
threat intel
Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware
A single malicious Google Docs message distributed via X direct message triggered different malware payloads depending on the recipient's operating system: AMOS stealer on macOS and NetSupport Manager on Windows. Huntress security analysts documented the attack chain and payload differentiation across platforms.
Why it matters: Mac and Windows users are both targeted by this campaign; practitioners should review X-based social engineering defenses and monitor for AMOS stealer and NetSupport Manager indicators of compromise (IOCs) on affected endpoints.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware
Future-dated: the source dates this story 2026-09-15, after the tracker first saw it, so it is shown by first seen.
A single malicious Google Docs message distributed via X direct message triggered different malware payloads depending on the recipient's operating system: AMOS stealer on macOS and NetSupport Manager on Windows. Huntress security analysts documented the attack chain and payload differentiation across platforms.
Why it matters: Mac and Windows users are both targeted by this campaign; practitioners should review X-based social engineering defenses and monitor for AMOS stealer and NetSupport Manager indicators of compromise (IOCs) on affected endpoints.
- Source published
- First seen by Cybersecurity Tracker