Apple users warned about fake update that steals money, passwords on Safari and Chrome

[usonian]

Very Short of it:
NEVER update your browser from a web page.
Upgrades come through the software upgrade under System Settings, or for browsers other than safari, through the browser's menus, i.e. "check for updates", and some can be set to automatically update. (I do that with Opera).
These update options make sure that the upgrade is coming from the software vendor, not some random website. ---usonian

https://7news.com.au/news/apple-users-warned-about-fake-update-that-steals-money-passwords-on-safari-and-chrome-c-12723442

The malware, also referred to as AMOS, uses a fake Chrome update prompt that appears on breached sites with JavaScript infections, according to Bleeping Computer.

Cybersecurity company Malwarebytes researchers this week discovered AMOS was targeting Mac users through the ClearFake fake browser update chain.

“ClearFake is a newer malware campaign that leverages compromised websites to distribute fake browser updates,” the company said in its latest security blog

Experts advise Mac users to steer clear of downloading browser updates from third-party sites and pop-ups.

Same info (but in less detail, thank you) at:
https://www.bleepingcomputer.com/news/security/atomic-stealer-malware-strikes-macos-via-fake-browser-updates/

[MOMFUDSKI]

1. I got a notification on my IPhone last week

for an upgrade. Did it. Today I got another notification of an upgrade coming soon. My husband’s computer got hacked few days ago. Pretty creepy. What is to be trusted anymore?

[usonian]

2. If you aren't computer-savvy enough to check the links, you should probably only install apps from the Apple store.

Updates will show up in the app store app, and those are checked by Apple.

The point is to never install an "update" from a web page, unless you are 100% sure the web page belongs to the developers, and never click on links in emails. But some links in emails are real. Telling them apart is not easy. Here are some tips.

https://www.nicva.org/article/tips-and-tools-to-check-links-in-emails-without-clicking
Tips and tools to check links in emails without clicking

Despite knowing all the perils of spam, phishing and malware-laden emails you will still get one that looks fairly good but you are rightfully suspicious and cautious of the content. What can you do to check for yourself?
short version:
7. If in doubt, don't click!

Note: Apple sends out notices of upgrades (these are changes to the operating system). They should show up in System Settings, and with a red dot on the icon. These can be trusted. Same for apps installed through the app store. They will show up under the Apple menu and in the Settings App as updates to apps.



When in doubt ask a friend or ask here on DU.