TLDR Tech / InfoSec
‘ClickLock Stealer' Bypasses macOS Security With Social Engineering, Process Killing
ClickLock Stealer is a macOS malware that has been seen since late May, with confirmed victims in at least 33 countries and over half in Europe. It tricks users into running a bash command that pulls four scripts for credentials, crypto, Keychain data, and a backdoor, then kills visible processes and NotificationCenter for hours to force password entry and hide security prompts. Stolen data is archived and sent to a Telegram bot.
Read the full story