Macos
- ClickFix MacSync: Fake AI Tool Installers Targeting Developers
Three ClickFix campaigns since November 2025 have been using fake AI tool installers -- including Claude Code impersonations -- to deliver MacSync infostealer via malicious Terminal commands. The attack works because developers are conditioned to trust exactly this workflow.