macOS ClickFix Campaign Uses Browser Fingerprinting to Deliver Atomic Stealer Malware
The operation relies on hundreds of look-alike domains, fake software-download pages, and Terminal commands designed to steal sensitive data from selected Mac users.
ClickFix...
DPRK Hackers Use EtherHiding Smart Contracts as Resilient Malware Command Channels
DPRK-linked threat actors are abusing Ethereum smart contracts as resilient command-and-control infrastructure in a highly sophisticated macOS malware operation, signalling a new phase in...
ClickFix Turns Mac Users Into Malware Installers Through Fake Verification Instructions
For years, CAPTCHA checks and “prove you’re human” prompts have been mildly annoying but harmless parts of web browsing.
Today, attackers are weaponizing that...
Fake Claude Code Installation Command Steals Developer Credentials and Crypto Wallets
A malicious Google ad campaign is targeting macOS users searching for “how to install Claude Code on Mac,” using a convincing Claude-branded installation guide...
Fake Camera Troubleshooting Commands Deliver RATs Across Windows and macOS
A North Korean-aligned threat actor is using fake job interviews and bogus camera troubleshooting prompts to infect Windows and macOS users with remote access...