logo

ClickFix attacks infecting PCs and Macs are going viral

ID: 0d5cb0cb-3ec3-5e8b-b32d-d51c912061a0

STIX ID: report--0d5cb0cb-3ec3-5e8b-b32d-d51c912061a0

Feed Name: Ars Technica Security (category)

Threat Score
78/100

Date Published: 2026-09-11

Date Updated: 2026-09-11

Author: Dan Goodin

...
...

The report describes the ClickFix distribution technique that convinces users to execute malicious commands directly (removing the need for signed installers), highlights macOS variants that can bypass Gatekeeper, and details large-scale abuse of public services and decentralized infrastructure — including evidence of campaigns with thousands of beaconing sites and usage by state-sponsored actors.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.