ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password
Group-IB has identified a new macOS infostealer, ClickLock Stealer, that uses a coercive technique to force victims to enter their login password.…
Tag: Jamf
Script Editor: Alternative Attack Vector for ClickFix
Script Editor is used in some ClickFix campaigns to avoid Terminal paste warnings, as documented by Jamf Threat Labs.
CrashStealer macOS Malware Uses Notarized Dropper to Bypass Gatekeeper and Steal Sensitive Data
Cybersecurity researchers at Jamf Threat Labs have uncovered a new macOS information stealer named CrashStealer, which uses a signed and Apple-notarized dropper…
Jamf: macOS Security Research on ClickFix Campaigns
Jamf Threat Labs documented a ClickFix campaign that avoids Terminal paste warnings by using applescript:// URLs, demonstrating evolving attack techniques.
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Salesforce disabled the Klue Battlecards app integration after detecting unusual activity that led to unauthorized access to customer data via OAuth token…