Security Bite: ClickFix malware authors already bypassing Apple’s new Terminal paste warning

Source: 9to5Mac

Overview

As you may know, a couple weeks ago on Security Bite I was raving about Apple’s new warning prompt in Terminal that appears when a user pastes potentially malicious commands. The security feature was bundled into the public release of macOS Tahoe 26.4 to further disrupt ClickFix attacks, which are now the leading delivery mechanism for malware on Mac.

However, it now appears malware authors are already deploying workarounds.