ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and cached credentials.

The macOS-focused infection chain is designed to deliver a shell script that profiles the host and then fetches a macOS malware payload that’s compatible with the computer’s CPU architecture.

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six

Threat Intelligence Alone Won’t Close the Exploitation Gap

Threat Intelligence Alone Won’t Close the Exploitation Gap A leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can be weaponized

Luanti removed from Google Play due to baseless AI copyright notice

Luanti removed from Google Play due to baseless AI copyright notice Source: Hacker News