MalwareBleeping Computer
9.5 — CRITICAL
New macOS ClickFix attack silently mounts DMGs to push infostealer
A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malicious disk image (DMG) files. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malicious disk image files, infecting Mac devices with the Atomic macOS Stealer (AMOS) infostealer.
⚙️Technical Details
Affected Systems
macOS
Attack Vectors
Terminal command, DMG file download, hdiutil utility
💥Impact Assessment
Severity: critical
Who Is at Risk
Users of affected Mac devices, including those using Chromium-based and Firefox-derived browsers
🛡️Recommended Actions
1Be cautious when websites instruct you to open Terminal and execute commands
2Do not run unfamiliar commands without understanding their purpose
3Regularly update your operating system and software to prevent exploitation of known vulnerabilities
📦Affected Products
Software:macOSHardware:
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.