New ClickLock macOS malware traps users into revealing login password
ClickLock is a new piece of information-stealing malware for macOS that ends all visible processes in order to compel users to input their system login password.
In addition to installing a persistent backdoor enabling continuous remote access to compromised devices, the virus is made to steal bitcoin assets, login credentials, password-manager data, browser information, and macOS authentication data.
After finding the virus on VirusTotal, where it was initially posted on June 9, researchers at Group-IB examined the ClickLock shell script. All of the platform's security suppliers were unaware of it at the time of the revelation.
Subsequent analysis showed that since May, the malicious software had infected at least 100 devices in 33 different countries.
The researchers noticed...