← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
ClickFix Malware Uses macOS Script Editor to Deliver Atomic Stealer | Jamf Threat Labs
WHITE CyberHunter_NL 2026-05-11 Modified: 2026-05-11
5
IOCs
LOW VOLUME
script editorterminalclickfixjamf threatlabsurl schemeappleunlike
Indicators of Compromise (2 / 5 total)
All FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
URL https://dryvecar.com/cleaner3/update — 2026-05-11
URL https://dryvecar.com/curl/04566d1d3f9717b2e7e6b643775d9ca72cef942f6df9ce075cf8c73a1bd2565a — 2026-05-11
References (1)
↗ https://www.jamf.com/blog/clickfix-macos-script-editor-atomic-stealer/