New macOS malware chain could cause a major security headache – here’s what we know

• Jamf reports that North Korean actors are using fake job ads and ClickFix tactics to target macOS users
• Victims are tricked into running Curl commands in a terminal and installing the FlexibleFerret backdoor malware.
• The campaign, called Contagious Interview, allows for credential theft, file exfiltration and system hacking.

State-sponsored North Korean attackers are targeting macOS users with new malwareusing a strategy that combines two popular approaches – fake job postings and ClickFix, experts warn.

Jamf Security Researchers confirmed they found attacks in the wild using ClickFix, an attack method in which the victim is presented with a false problem and at the same time given a fix for it. It's an evolution of the old “You have a virus” pop-up that dominated the Internet in the early 2000s.