New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password

**ClickLock Stealer — macOS infostealer using coercive UI kill-loops:** ClickLock is delivered via a pasted Terminal command (ClickFix front-end) that, if the victim cancels a fake password dialog, installs LaunchAgents that repeatedly kill Finder, Dock and other UI processes until the user types their password; successful runs yield macOS login passwords, Chrome Safe Storage keys, browser credentials and cookies, crypto wallet files, and a GSocket-derived backdoor communicating via relays and Telegram bots. Group-IB reports ~100 targets across 33 countries, low detection on VirusTotal, and recommends powering off, booting into Safe Mode, revoking sessions and rotating credentials.