Apple users warned about fake update that steals money, passwords on Safari and Chrome [View all]
Very Short of it:
NEVER update your browser from a web page.
Upgrades come through the software upgrade under System Settings, or for browsers other than safari, through the browser's menus, i.e. "check for updates", and some can be set to automatically update. (I do that with Opera).
These update options make sure that the upgrade is coming from the software vendor, not some random website. ---usonian
https://7news.com.au/news/apple-users-warned-about-fake-update-that-steals-money-passwords-on-safari-and-chrome-c-12723442
The malware, also referred to as AMOS, uses a fake Chrome update prompt that appears on breached sites with JavaScript infections, according to Bleeping Computer.
Cybersecurity company Malwarebytes researchers this week discovered AMOS was targeting Mac users through the ClearFake fake browser update chain.
ClearFake is a newer malware campaign that leverages compromised websites to distribute fake browser updates, the company said in its
latest security blog
Experts advise Mac users to steer clear of downloading browser updates from third-party sites and pop-ups.
Same info (but in less detail, thank you) at:
https://www.bleepingcomputer.com/news/security/atomic-stealer-malware-strikes-macos-via-fake-browser-updates/