MacOS ClickFix AMOS Campaign
https://ransom-isac.org/blog/macos-clickfix-amos-campaign/
Published: September 17, 2026 00:00
A Fake “Bot Protection” Prompt Is Stealing Mac Users’ Crypto Wallets, and the Cleanup Is Not Keeping Up
🦜 Ransom-ISAC Blog
@ransom-isac.org.blog@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
Threat intelligence, DFIR analysis, and cybersecurity research from Ransom-ISAC
Site URL: ransom-isac.org/blog/
Feed URL: ransom-isac.org/feed.xml
Posts: 2
Followers: 1
CRPx0 ClickFix Ransomware Analysis
https://ransom-isac.org/blog/crpx0-clickfix-ransomware-analysis/
Published: August 27, 2026 00:00
CRPx0 is a ClickFix-delivered ransomware-as-a-service operation whose lures impersonate Windows and macOS update prompts and reCAPTCHA checks to trick victims into running a copied command. Ransom-ISAC traces the full killchain — from the ClickFix HTML…