#ParsedReport #CompletenessMedium
17-09-2026

MacOS ClickFix AMOS Campaign

https://ransom-isac.org/blog/macos-clickfix-amos-campaign/

Report completeness: Medium

Threats:
Clickfix_technique
Amos_stealer
Discord-c2
Loaderbot

Victims:
Small and medium sized businesses, Wordpress websites, Mac users

TTPs:
Tactics: 6
Technics: 13

IOCs:
Hash: 4
File: 4
Domain: 159

Soft:
MacOS, WordPress, WhatsApp, Sogou, ChatGPT, Anthropic, curl, Gatekeeper, Chrome, Firefox, have more...

Wallets:
electrum, metamask, keplr, rabby

Algorithms:
base64, sha256

Platforms:
arm, apple, intel

YARA: Found