NewsThe Hacker News07.08.2026

ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and cached credentials. The macOS-focused infection chain is designed to deliver a shell script that profiles the host and then fetches a macOS malware payload that's compatible with the computer's CPU architecture. "

Other advisories

Highosv:MAL-2026-17692Malicious code in clickfix_npm_delivery (npm)
Not ratedncscnz:compromised-websites-serving-clickfix-pagesCompromised Websites Serving ClickFix Pages
Not ratedsingcert:al-2025-068Ongoing ClickFix Campaign

Other news entries

Yet Another ClickFix Campaign, (Wed, Oct 28th)NewsSANS ISC Diary28.10.2026
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacksNewsBleepingComputer21.10.2026
Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP ConnectionsNewsSecurityWeek21.10.2026
ClickFix has never been bigger, and AI tools are its most convincing lure yetNewsBleepingComputer21.10.2026
Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious CommandsNewsThe Hacker News21.10.2026
Decades-Old Windows Utility Powers Modern ClickFix AttackNewsDark Reading21.10.2026
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access TrojanNewsThe Hacker News20.10.2026
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other MalwareNewsThe Hacker News20.10.2026

Source: https://thehackernews.com/2026/08/clickfix-attacks-deliver-macos-stealer.html

More on ClickFix

Other advisories

Other news entries