Hackers have a new tool called ClickFix. The new attack vector combines fake human-verification prompts with malware, trying to trick users into running Terminal commands that bypass macOS security.
Hackers are already probing impacted versions of Nginx web server’s user interface, hunting for credentials and encryption keys.