“macOS users may face real, sophisticated threats that don’t require exploits or elevated access to succeed”: ClickLock Stealer attempts to trick Apple users into revealing their passwords
Group‑IB discovers ClickLock, a new information stealer focused on macOS that uses aggressive social engineering by sending password prompts and terminating key applications every 210 ms until victims comply. Once the credentials are obtained, it exfiltrates browser data, crypto wallets, password manager entries, FTP configurations and device information via the Telegram Bot API. Active since […]










