Developing· Apple· Published Jul 18, 2026

New macOS ClickFix Campaign Targets AppleScript Stealers

9to5Mac reported that Netskope Threat Labs has spotted a macOS ClickFix campaign using social engineering to get victims to run an AppleScript-based info stealer and a persistent remote access trojan. The outlet says the attack is designed to slip past built-in protections by targeting users directly.

Developing62/100

+5 today

Credible lead

How is confidence evaluated?

AI summary

According to 9to5Mac, a newly described macOS campaign is abusing user trust rather than technical exploits to compromise Apple systems. The report centers on an AppleScript-driven payload and a lingering remote access component.

Why this matters

This is a reminder that Macs can still be targeted through deception even when platform security is strong. For Apple users and IT teams, the story underscores the need for extra caution around prompts, downloads, and unexpected instructions.

Confidence reason

The source text explicitly describes a Netskope Threat Labs report and a macOS ClickFix campaign, but it does not provide extra specifics beyond the attack type and payloads.

Evidence

9to5MacPrimary
Apple @ Work: New macOS ClickFix malware brings a new potential backdoor to your enterprise fleet - 9to5Mac
Bradley C
"Apple @ Work is exclusively brought to you by Mosyle , the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional grade platform all the "
Open original source

Recommended signals

Recommended from Apple topics and recent confidence changes

Confirmed95/1001d ago

Apple Newsroom reports MLS returns to Apple TV tomorrow

Apple Newsroom reports that Major League Soccer resumes on Apple TV tomorrow, with every regular-season match available to subscribers in more than 100 countries and regions. The outlet says coverage also includes select tournaments and playoff action beyond the regular season.

Official announcement

Confirmed95/1009d ago

Apple Newsroom Confirms $30 Billion Investment Expansion with Broadcom for U.S.-Made Silicon

Apple announced a multiyear deal with Broadcom to manufacture billions of advanced wireless components and custom silicon within the United States.

Official announcement

Developing89/1008d ago

9to5Mac: Regulatory filings point to heavier iPhone 18 Pro Max with 5,500mAh battery

9to5Mac reported that regulatory filings indicate a heavier chassis for the iPhone 18 Pro Max, potentially reaching 240g due to a significant jump in battery capacity.

Filing / document

Developing64/1004d ago

9to5Mac reports tvOS 27 and HomePod 27 public betas are now available

9to5Mac reported that Apple has opened public beta access for tvOS 27 and HomePod 27. The post also outlines several features Apple says are included, while noting that one rumored Siri AI feature is not in the betas yet.

Media report

Back to Live Feed Explore more Apple signals