CLICKFIX ATTACKS DEPLOY MACOS MALWARE FOR CRYPTO THEFT

Security researchers identified a malware variant delivered via ClickFix, a social engineering technique that tricks users into downloading malicious files. The Go-based infostealer focuses on extracting sensitive data from macOS systems. Targets include: - Cryptocurrency wallets and assets - Browser-stored passwords - Apple Keychain credentials - Cached authentication data ClickFix attacks typically present fake system alerts or error messages prompting users to download a "fix." Once executed, the malware gains access to stored credentials across multiple applications. The campaign highlights the expanding threat landscape for macOS users, traditionally considered lower-risk targets. Security experts recommend avoiding downloads from untrusted sources, verifying system alerts through official Apple channels, and maintaining credential isolation across applications. Users should review browser password managers and consider enabling two-factor authentication on cryptocurrency exchanges and sensitive accounts.