Story thread · 5 reports / 5 sources

ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

thehackernews.com · 4dShare

ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and cached credentials. The macOS-focused infection chain is designed to deliver a shell script that profiles the host and then fetches a macOS malware payload that's compatible with the computer's CPU architecture. "

First report: ClickFix attack pushes macOS infostealer for crypto theft attacks — bleepingcomputer.com, 4d