ClickLock Stealer malware targets macOS users via ClickFix attacks (heise.de)

• ClickLock Stealer infects Macs via ClickFix; at least 100 victims in 33 countries
• Malware steals crypto wallet, browser, and password manager data
• Extortion tactic: canceling password dialog crashes system processes
• Backdoor via GSocket persists after data theft

"Security firm Group-IB warns of ClickLock Stealer, a macOS malware distributed via ClickFix social engineering. Over 100 victims in 33 countries have been identified, half in Europe. The malware steals passwords, cryptocurrency wallets, and browser credentials. It employs an extortion tactic: if the user cancels the fake password prompt, critical system processes are terminated. A backdoor remains after data theft."