Jamf researchers identified a new "ClickFix" social engineering campaign targeting Mac users via a fake Apple-themed webpage that instructs victims to run malicious commands under the guise of reclaiming disk space. The attack vector relies on tricking users into executing terminal commands themselves, which then deliver malware. No specific CVSS score, affected software versions, patches, or workarounds are detailed in the provided article.
Security researchers at Jamf have uncovered a new ClickFix-style attack targeting Mac users via a fake Apple-themed webpage offering instructions on how to “reclaim disk space on your Mac”. The malicious page (Source: Jamf) ClickFix for everybody ClickFix is a social engineering technique that cons victims into running malicious commands on their own machine, usually by pretending the commands are needed to fix a problem or perform routine upkeep. This technique was initially aimed at … More → The post ClickFix campaign delivers Mac malware via fake Apple page appeared first on Help Net Security .