ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers
ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers
16 March 2026
Three different ClickFix campaigns have been found to act as a delivery vector for the deployment of a macOS information stealer called MacSync.
"Unlike traditional exploit-based attacks, this method relies entirely on user interaction – usually in the form of copying and executing commands – making it particularly effective against users who may not appreciate the implications of running