Apple @ Work: New macOS ClickFix malware brings a new potential backdoor to your enterprise fleet

Netskope Threat Labs details a macOS ClickFix campaign that tricks users into running an AppleScript-based info stealer and remote access trojan. The attack uses fake websites, no-file execution, and targets 25 desktop crypto wallets. It installs a persistent backdoor disguised as com.apple.accountsd.