New macOS ClickFix malware targets enterprise fleets with backdoor

Netskope Threat Labs reports a sophisticated macOS ClickFix campaign that uses social engineering to deploy an AppleScript-based information stealer and persistent remote access trojan. The attack bypasses macOS native protections by tricking users into executing malicious code. Over 45,000 organizations use Mosyle's Apple Unified Platform, highlighting the enterprise risk.