ClickFix campaign delivers macOS infostealer via DMG

Reported 25 Jun 2026 by otx · Severity: medium

A new macOS ClickFix campaign employs fake CAPTCHA pages to deceive users into executing malicious Terminal commands. The attack chain downloads and invisibly mounts a DMG file containing a self-signed information-stealer application bundle. This payload, assessed as belonging to