TI Mindmap HUB
Threat Intelligence Report

macOS ClickFix Campaign: AppleScript Stealers & New Terminal Protections

📅 April 26, 2026 📰 www.netskope.com 🔍 0 CVE(s) referenced

A sophisticated cross-platform ClickFix campaign is actively targeting macOS users with an AppleScript-based infostealer that uses persistent fake system prompts to harvest credentials, browser data, and cryptocurrency wallets—bypassing MFA and exfiltrating sensitive information—while new macOS updates introduce terminal warnings to help thwart these social engineering attacks.

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle