Globally, scams are becoming a growing problem, and con artists can compromise someone's security and privacy in several ways. According to a recent investigation, threat actors are using a fake browser update chain identified as "ClearFake" to spread the Atomic Stealer virus, often known as AMOS, to Mac users.

The cybersecurity firm Malwarebytes claims that a more recent malware campaign called ClearFake uses hijacked websites to spread phoney browser updates.

READ: FB Account Hacking Malware Targeting Indian HRs, Digital Marketers Via 'Google Docs Offline' Extension; Safety Tips

"Threat actors can reach a larger audience by using an expanding number of compromised sites at their disposal to steal passwords and files of interest that can be immediately monetized or used for other assaults," the researchers said.

On November 17, security researcher Ankit Anubhav noticed that a payload associated with ClearFake was also distributed to Mac users. The ClearFake campaign was launched in July of this year with the intention of misleading Windows users into updating their Chrome browsers by using JavaScript injections to make fake alerts appear on infected websites. The study claims that these attacks make use of both the typical Chrome overlay and a Safari update bait.

"The payload, a DMG file posing as a Safari or Chrome update, is designed specifically for Mac users. The victims are given instructions on how to access the file, which prompts them for the administrative password and then launches commands right away," according to the researchers.

The commands, which include the ability to steal files and passwords, were visible to the researchers when they examined strings from the malicious application in a file that they were able to access. They discovered the malware's command and control server, to which the stolen data was transmitted, in the same file.

READ: Facebook Scam: 'Look Who Died' Messages Target Users; All You Need To Know

"Mac users especially need to be aware of ClearFake because it has emerged as one of the most prominent social engineering operations in recent times. Utilising web protection solutions is advised in order to disable the threat actor's harmful infrastructure," the researchers suggested.