ClickLock Malware Targets Mac Users
New Mac threat forces users to surrender their passwords.
1What is ClickLock Stealer?
ClickLock Stealer is a new malware targeting Mac users. It hijacks system behavior to force users into surrendering their passwords. Detected by Group-IB, the threat has reached at least 100 targets in 33 countries since May 2026.
2How Does It Spread?
The attack begins when users copy and execute a command from a malicious page into Terminal. The script then downloads separate components to steal passwords, collect browser and cryptocurrency data, access macOS Keychain, and install a persistent backdoor.
3Connection to ClickFix
ClickLock builds on ClickFix, a known scam that uses fake CAPTCHA or Cloudflare verification pages to trick users into pasting commands into Terminal. ClickLock adds a coercive step to this process.
4How Can Users Protect Themselves?
Users are advised to avoid executing Terminal commands from unknown sources. Keeping security software updated and avoiding suspicious pages is crucial. Group-IB has identified over half of the activity in Europe.
5Global Impact
While over half of the attacks were detected in Europe, targets were also found in North America, the Middle East, and Africa. This indicates the threat has a global reach, requiring users to stay vigilant and enhance security measures.
6Conclusion and Warning
ClickLock Stealer poses a serious threat to Mac users. Attackers force users to surrender passwords, gaining permanent access to their systems. Security experts recommend users stay informed and not neglect security measures against such threats.
Original article: AppleInsider News — ClickLock Malware Mac Kullanıcılarını Hedef Alıyor