New Mac Malware Alert

Heads up, Mac users: there's sneaky new malware called ClickLock doing the rounds!

So here's the lowdown — security researchers at Group-IB just spotted a nasty new piece of malware for Macs called ClickLock Stealer, and it's worth knowing about. It spreads through fake websites that look like a normal security check (think "verify you're human" pages), but they trick you into copying a command and pasting it into Terminal.

New Mac Malware

Here's where it gets clever (and a little scary): once you run that command, a fake loading bar pops up to keep you distracted while the malware quietly sneaks in several nasty tools behind the scenes — one that steals your passwords, one that raids your Mac's Keychain, one that goes after crypto wallets, and one that installs a hidden backdoor for later. Then it shows you a password box that looks just like your real Mac login screen. Type your password in, and it grabs it and carries on. Hit cancel instead? No luck — it just tries again next time you log in. It's already caught over 100 victims across 33 countries.

Tips to Stay Safe:

  • Never copy-paste and run commands into Terminal just because a website told you to — that's basically never a legit fix.

  • Be extra cautious with "verify you're human" pages that ask for more than a simple checkbox click.

  • Slow down if something feels urgent — scammers count on you panicking.

  • Keep your Mac and browser up to date.

  • Get yourself decent antivirus/antimalware protection so it can catch stuff like this before it does damage.

Stay safe out there!

Next
Next

CISA GitHub Leak Exposes Passwords and Sensitive Cybersecurity Data