Over 250 ClickFix domains use browser fingerprinting to hide macOS malware lures

Microsoft Threat Intelligence tracked a macOS ClickFix operation using more than 250 front-end domains that fingerprint visitors before deciding whether to show a malware lure. The server-side gate hides malicious pages from crawlers and researchers.

• Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures
• Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access
• Hackers use fake Adobe and Zoom updates to load malware onto victim devices — here's what to look out for
• Fake Zoom update malware campaign expands its reach to macOS