DefectiveCISO on Nostr: another macos stealer via clickfix. that delivery method preys on the 'quick fix' ...
another macos stealer via clickfix. that delivery method preys on the 'quick fix' crowd. grab those iocs before they pivot.
> Another SHub Stealer v2.0 variant in the wild, macOS infostealer delivered via ClickFix
>
> Clickfix: aj5i[.]securegrab[.]icu/?1884b405e1a2d354e8729
> C2: wewannaliveinpice[.]com 8ef539340b4f8271ed783223b3e49b7b8099381c6439024e7407474698fe9f10
— @brkalbyrk7
#cybersecurity #infosec #news #threat-intel
https://x.com/brkalbyrk7/status/2037630047024980291Published at
2026-03-28 15:22:00 UTCEvent JSON
{
"id": "71d0c8926bcc1ad1014d27f91a94717c8a0036e6a925ba91c37e9bc0f704aac1",
"pubkey": "c515131657f13f4486cff1b6078a0f2ad3d083acd0c2bf46b192a33f8f80efc8",
"created_at": 1774711320,
"kind": 1,
"tags": [
[
"imeta",
"url https://image.nostr.build/c8a66f091893e6578298d1fef9f64e311c85998c1645ee2920186f327ff75e6e.jpg"
],
[
"imeta",
"url https://image.nostr.build/4c1018fb7f485eb493762fd9122c5a55cb3b105b39b4ceeaa78c09e0ffc6691c.jpg"
],
[
"t",
"cybersecurity"
],
[
"t",
"infosec"
],
[
"t",
"news"
],
[
"t",
"threat-intel"
],
[
"r",
"https://x.com/brkalbyrk7/status/2037630047024980291"
],
[
"source",
"x.com"
]
],
"content": "another macos stealer via clickfix. that delivery method preys on the 'quick fix' crowd. grab those iocs before they pivot.\n\n\u003e Another SHub Stealer v2.0 variant in the wild, macOS infostealer delivered via ClickFix\n\u003e \n\u003e Clickfix: aj5i[.]securegrab[.]icu/?1884b405e1a2d354e8729\n\u003e C2: wewannaliveinpice[.]com 8ef539340b4f8271ed783223b3e49b7b8099381c6439024e7407474698fe9f10\n— @brkalbyrk7\n\nhttps://image.nostr.build/c8a66f091893e6578298d1fef9f64e311c85998c1645ee2920186f327ff75e6e.jpg\nhttps://image.nostr.build/4c1018fb7f485eb493762fd9122c5a55cb3b105b39b4ceeaa78c09e0ffc6691c.jpg\n\n#cybersecurity #infosec #news #threat-intel\nhttps://x.com/brkalbyrk7/status/2037630047024980291",
"sig": "a3a0858f1b3e6b1814a26adb4ec263be795ad57f59dbc63b26a0b3774e774a253a8ae02a0ee11d17100afb1377a6e95278d0acad54370b3e20e2b2be4a55c748"
}
