VulnerabilityBleeping Computer
9.5 — CRITICAL
New ClickLock macOS malware traps users into revealing login password
A new macOS information-stealing malware dubbed ClickLock terminates all visible processes to force users into entering their system login password. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
ClickLock is a macOS information-stealing malware that forces users into revealing their login password through social engineering and forced interaction loops, targeting cryptocurrency assets, login credentials, and other sensitive data.
⚙️Technical Details
Affected Systems
macOS systems
Attack Vectors
ClickFix lurepasting malicious command in Terminalfake Cloudflare 'human verification' sequence with animated progress bar
💥Impact Assessment
Severity: critical
Who Is at Risk
Users of macOS systems, particularly those using cryptocurrency wallets and password managers
🛡️Recommended Actions
1Avoid pasting in Terminal commands they don't fully understand, especially if the request comes from a website.
2If prompted to enter the login password when the rest of the system appears unresponsive, force a system shutdown by holding the power button and then booting into Safe Mode to recover the system.
3Keep software up-to-date and use reputable security software
📦Affected Products
macOS systemsbrowser extensions (Chrome, Firefox, Brave, Edge, Opera, Vivaldi, Arc, Chromium)password managerscryptocurrency wallet extensions and desktop wallet files
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.