2026-09-29 (TUESDAY): MACFINGER CLICKFIX ACTIVITY

NOTICE:

• Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website.

NOTES:

• I have not yet identified the macOS malware delivered by this campaign.
• It doesn't appear to be AMOS Stealer or any of the other macOS malware families I've run across so far.

ASSOCIATED FILES:

• 2026-09-29-IOCs-from-MacFinger-ClickFix-activity.txt.zip   1.9 kB   (1,879 bytes)
• 2026-09-29-Macfinger-ClickFix-activity.pcap.zip   20.7 MB   (20,660,190 bytes)
• 2026-09-29-Macfinger-ClickFix-files.zip   51.8 MB   (51,821,688 bytes)

Click here to return to the main page.