# ClickLock Malware Targets Mac Users New Mac threat forces users to surrender their passwords. - **Source:** [AppleInsider News](https://brifing.si/source/4f063a0c-06a9-46c3-84ea-633b4d4b1a4f) - **Published:** 2026-07-20 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/953cf899-f7a3-4866-b7c5-fb53a8d985a7 ## What is ClickLock Stealer? ClickLock Stealer is a new malware targeting Mac users. It hijacks system behavior to force users into surrendering their passwords. Detected by Group-IB, the threat has reached at least 100 targets in 33 countries since May 2026. ## How Does It Spread? The attack begins when users copy and execute a command from a malicious page into Terminal. The script then downloads separate components to steal passwords, collect browser and cryptocurrency data, access macOS Keychain, and install a persistent backdoor. ## Connection to ClickFix ClickLock builds on ClickFix, a known scam that uses fake CAPTCHA or Cloudflare verification pages to trick users into pasting commands into Terminal. ClickLock adds a coercive step to this process. ## How Can Users Protect Themselves? Users are advised to avoid executing Terminal commands from unknown sources. Keeping security software updated and avoiding suspicious pages is crucial. Group-IB has identified over half of the activity in Europe. ## Global Impact While over half of the attacks were detected in Europe, targets were also found in North America, the Middle East, and Africa. This indicates the threat has a global reach, requiring users to stay vigilant and enhance security measures. ## Conclusion and Warning ClickLock Stealer poses a serious threat to Mac users. Attackers force users to surrender passwords, gaining permanent access to their systems. Security experts recommend users stay informed and not neglect security measures against such threats. ## Sources covering this story - https://appleinsider.com/articles/26/07/20/clicklock-malware-makes-macs-unusable-until-victims-surrender-their-passwords?utm_source=rss — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._