According to BlockBeats, on August 23, cybersecurity company Moonlock warned that the AMOS stealer targeting Mac users can now clone the Ledger Live software and may soon clone other wallet applications.

According to a Moonlock Lab report on August 5, the program is being revived and advertised through Google Adsense, posing as popular MacOS programs, including Loom, Figma, VPN TunnelBlick, and Callzy. None of the developers of these applications authorized the fake versions of the AMOS malware.