Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts

The report describes two active threats: a Mac-targeting ClickFix-style campaign delivered via a verified sponsored X ad that redirected victims to a lookalike domain (dynamicmacisland.com) and tricked them into pasting Terminal commands to install Atomic Stealer variants, and a Windows-targeting ConsentFix method that lures Microsoft 365 users into dragging a callback link to the browser, thereby handing attackers session tokens and enabling account takeover without passwords or MFA. The write-up details attack mechanics, used infrastructure, and basic mitigations.