TI Mindmap HUB
Threat Intelligence Report

macOS ClickFix Lures Deploy AppleScript Stealer & Persistent RAT

📅 June 25, 2026 📰 www.netskope.com 🔍 0 CVE(s) referenced

A highly sophisticated, fileless macOS ClickFix campaign is actively targeting users with a persistent AppleScript-based RAT that not only steals credentials, browser data, and crypto wallets, but also hijacks wallet applications and maintains full remote access—all while evading detection and leaving minimal forensic artifacts.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle