Fake Homebrew Typosquats Used to Deliver Cuckoo Stealer via ClickFix

A sophisticated typosquatting campaign exploited fake Homebrew install pages and the ClickFix technique to trick macOS users into running a credential-harvesting script, which then deployed the powerful Cuckoo Stealer malware to exfiltrate sensitive data, cryptocurrency wallets, and maintain persistent, encrypted remote access—all while blending seamlessly into trusted developer workflows.