Malware5 min read
macOS ClickFix Gains Silent DMG Mount to Push AMOS Stealer
Unit 42 uncovers ClickFix campaign using hdiutil -nobrowse to silently mount disk images on macOS. Victims never see the DMG—just Atomic Stealer harvesting credentials.
James RiveraJun 23, 2026