[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRyRU1qlXwTh6QiuxYjJRN_KHgE5j54TquM6l3i1T8-I":3},{"article":4,"iocs":40,"watch_terms":47},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":29},"a606f39c-67db-429f-ab54-5f9b329b0c93","⚠️ BAD\n- New macOS ClickFix variant skips Terminal entirely — uses Script Editor, launched straig...","bad-new-macos-clickfix-variant-skips-terminal-entirely-uses-script-editor-launch-d59467","⚠️ BAD\n- New macOS ClickFix variant skips Terminal entirely — uses Script Editor, launched straight from the browser\n- Payload: AMOS malware via a fake Claude AI installer\n- SentinelOne customers are protected.","A new variant of the ClickFix malware campaign has emerged targeting macOS users, circumventing traditional Terminal-based execution by leveraging Script Editor instead. The attack delivers AMOS malware disguised as a fake Claude AI installer, launched directly from the browser. SentinelOne reports protection against this variant.","New ClickFix macOS variant bypasses Terminal using Script Editor to deliver AMOS malware.",null,"https:\u002F\u002Fx.com\u002FSentinelOne\u002Fstatus\u002F2042709884840612049","2026-04-10T21:02:42+00:00","2026-04-10T22:00:06.714733+00:00",8,[17,20,23],{"name":18,"type":19},"macOS","product",{"name":21,"type":22},"SentinelOne","vendor",{"name":24,"type":19},"Claude","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":25,"icon":11,"name":27,"slug":28},"Malware","malware",[30,35],{"category":31},{"id":32,"icon":11,"name":33,"slug":34},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":36},{"id":37,"icon":11,"name":38,"slug":39},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[41,44],{"type":28,"value":42,"context":43},"ClickFix","macOS malware variant using Script Editor for execution",{"type":28,"value":45,"context":46},"AMOS","Payload delivered via fake Claude AI installer",[21,18,24]]