Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

1Key Takeaways

• A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure, a change Microsoft Threat Intelligence tracked on infrastructure it had been watching for weeks.
• The server-side gate hides the malicious page from crawlers and sandboxes while presenting selected Mac users with a fake software download.