New macOS ClickFix campaign silently mounts DMGs to deploy infostealer malware
Tags Security · Consumer
BleepingComputer·
A new macOS ClickFix attack campaign uses Terminal commands to silently download, mount, and launch malware from malicious DMG files, deploying info-stealers without visible user prompts.
Technical significance
The campaign exploits macOS's permissive Terminal permissions and DMG auto-mount behavior. Developers of macOS security tools should update detection rules for silent DMG mount sequences and Terminal command patterns.
