THREAT OPS › Threat News › ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets
ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets
ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and cached credentials.
The macOS-focused infection chain is designed to deliver a shell script that profiles the host and then fetches a macOS malware payload that's compatible with the computer's CPU architecture.
"
MITRE ATT&CK techniques
- CredentialsT1589.001