Malware targets Mac users with fake CAPTCHA and AMOS Stealer

ClickFix, a social engineering tactic that has been targeting both Windows and Mac users since early 2024, continues to evolve. 

Just last month, I reported on how attackers were using fake CAPTCHA prompts to trick Windows users into installing malware themselves. 

Now, that same trick is being turned against macOS. Cybersecurity researchers have uncovered a new campaign using ClickFix to deliver Atomic macOS Stealer (AMOS), a powerful information-stealing malware targeting Apple systems.