← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
ClickFix Malware Uses macOS Script Editor to Deliver Atomic Stealer | Jamf Threat Labs
WHITE CyberHunter_NL 2026-05-11 Modified: 2026-05-11
5
IOCs
LOW VOLUME
script editorterminalclickfixjamf threatlabsurl schemeappleunlike
Indicators of Compromise (2 / 5 total)
All FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 04566d1d3f9717b2e7e6b643775d9ca72cef942f6df9ce075cf8c73a1bd2565a — 2026-05-11
FileHash-SHA256 3d3c91ee762668c85b74859e4d09a2adfd34841694493b82659fda77fe0c2c44 — 2026-05-11
References (1)
↗ https://www.jamf.com/blog/clickfix-macos-script-editor-atomic-stealer/