ClickFix technique uses Script Editor instead of Terminal on macOS

Jamf Threat Labs describes a ClickFix-style macOS campaign that abuses the applescript:// URL scheme to open Script Editor with a pre-filled script, which downloads and executes an obfuscated payload that stages and runs an Atomic Stealer Mach-O binary; the report includes execution details, decoding methods, and IOCs (domain, URLs, filename and SHA256).