macOS ClickFix Campaign: AppleScript Stealers & New Terminal Protections

Reported 21 Apr 2026 by otx · Severity: medium

A sophisticated ClickFix campaign targets both Windows and macOS users through fake CAPTCHA pages that trick victims into executing malicious commands. The macOS variant deploys an AppleScript-based infostealer that harvests sensitive data including keychain databases, credential