Choziosi (OS X)

Aliases: ChromeLoader, Chropex

Malware type
loader
Family
Malware family
Last IoC activity
2026-07-21 08:36:02
Profile updated
2026-07-07 14:35:39

Targeted industries: technology-and-telecommunications

Context

A loader delivering malicious Chrome and Safari extensions.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Osx.Choziosi (report)
  • github.com — Cs Installer (report)
  • redcanary.com — Chromeloader (report)
  • th3protocol.com — Choziosi Loader (report)
  • blogs.blackberry.com — Chromeloader Infects The Browser By Loading Malicious Extension (report)
  • CrowdStrike — How Crowdstrike Uncovered A New Macos Browser Hijacking Campaign (report)

External references