⚠️ BAD - New macOS ClickFix variant skips Terminal entirely — uses Script Editor, launched straig...

Summary

A new variant of the ClickFix malware campaign has emerged targeting macOS users, circumventing traditional Terminal-based execution by leveraging Script Editor instead. The attack delivers AMOS malware disguised as a fake Claude AI installer, launched directly from the browser. SentinelOne reports protection against this variant.

Indicators of Compromise

• malware — ClickFix
• malware — AMOS

Entities