TLDR Dev · MISCELLANEOUS
TECH IMPERSONATORS: CLICKFIX AND MACOS INFOSTEALERS
Summary from the TLDR Dev newsletter
Datadog identified an active campaign using fake GitHub repositories to impersonate software companies and distribute infostealers using the "ClickFix" social engineering technique. Victims are lured to malicious pages that instruct them to copy-paste commands into their terminal, leading to the execution of macOS infostealers like MacSync and SHub Stealer.