Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures
Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures
05 August 2026
A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure, a change Microsoft Threat Intelligence tracked on infrastructure it had been watching for weeks.
The server-side gate hides the malicious page from crawlers and sandboxes while presenting selected Mac users with a fake software download. Microsoft