ClickLock Stealer hijacks macOS via password‑prompt loops and process‑killing
Group‑IB uncovered ClickLock Stealer, a macOS‑only malware that lures victims into running a bash command. It spawns a backdoor and steals browsers, crypto wallets, Keychain data, then suppresses security dialogs with aggressive process‑killing, forcing users to reveal passwords. The campaign spans 33 countries.