ClickLock macOS Password Stealer
On 16 Jul, The Hacker News reported a new ClickLock macOS password stealer that kills applications every 210 milliseconds until the victim enters their password. BleepingComputer reported the same day that the malware traps Mac users into revealing their login password. It uses the operating system’s basic need for authentication to create a coercive loop.
On 21 Jul, Malwarebytes Labs reported that ClickLock locks the Mac until the user hands over the password. Across the three reports, the tactic is blunt: make the computer unusable and wait for frustration to do the attacker’s work.
Assuming the reports are factual, the impact is 0%. The affected group is Mac users who encounter ClickLock and surrender their login password. They lose control of the machine during the lockout and expose a credential. The tracked event shows no broader measured impact.
Watch for independent technical analysis that reproduces the 210-millisecond application-killing loop, as well as details on distribution, victim numbers, or an Apple response.
A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a streaming module that allows the attacker to interactively
A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malicious disk image (DMG) files. [...]
Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's capable of harvesting sensitive data from compromised systems. Unlike other
ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and
A new campaign delivering the Atomic Stealer malware to macOS users abuses the Script Editor in a variation of the ClickFix attack that tricked users into executing commands in
A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials.
Disguised as Apple's CrashReporter, CrashStealer steals passwords, browser data, crypto wallets, and other sensitive information.
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →