Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures
Microsoft Threat Intelligence has uncovered a macOS ClickFix operation that uses more than 250 front-end domains to distribute malware, including MacSync and…
Tag: Terminal
macOS 26.4: Apple’s Update with Enhanced Terminal Protections
macOS 26.4, released on March 24, 2026, includes protections against ClickFix-style attacks, such as a confirmation prompt for Terminal when pasting commands…
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake…
chalk npm Package
chalk is a widely used npm package for terminal string styling. It was compromised alongside debug in the September 2025 supply chain…
ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password
Group-IB has identified a new macOS infostealer, ClickLock Stealer, that uses a coercive technique to force victims to enter their login password.…
macOS Terminal Application
The macOS Terminal app is used in the ClickFix technique of the DPRK malvertising campaign. Victims are tricked into pasting a malicious…