ClickLock on macOS: stealer pressures victims by killing apps until the password is entered

Colleagues, I’d like to draw your attention to a cybersecurity development: a new macOS stealer called ClickLock has emerged.

It disguises itself as a normal command paste and a fake verification step. If the user refuses, it starts killing applications every 210 ms until the password is entered.

If the password is provided, the malware attempts to steal Keychain data, browser credentials and crypto wallets. According to Group-IB, more than 100 targets in 33 countries have already been identified.

Why this matters: the attack targets not only the system, but also user behavior.

In your view, what is more effective against such attacks today — employee awareness or technical restrictions?

#cybersecurity #macOS #malware #infostealer