From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide | Microsoft Security Blog

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while giving defenders new hunting opportunities.