OTX Threat: ClickFix campaign delivers macOS infostealer via DMG
AI Summary
A new macOS ClickFix campaign employs fake CAPTCHA pages to deceive users into executing malicious Terminal commands. The attack chain downloads and invisibly mounts a DMG file containing a self-signed information-stealer application bundle. This payload, assessed as belonging to the AMOS (Atomic macOS Stealer) lineage—specifically the Odyssey variant—prompts users for passwords through fake Syste
Discussion
Sign in to join the discussion.
Loading comments…