ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

thehackernews.com Aug 8, 2026

ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

Curated by Shubham · TechCapsules · Aug 8, 2026

AI-summarised brief · reviewed before publication

ClickFix‑style attacks now deliver a Go‑based macOS stealer that siphons cryptocurrency while exfiltrating passwords, iCloud Keychain entries and cached credentials. The chain begins when a victim pastes a ClickFix command into Terminal, launching a Bash profiler that gathers system data and pulls a Mach‑O payload matching the CPU architecture. The payload escalates privileges via a fake error prompt, then transmits stolen data to a remote server. Its distinctive “DRAIN” routine checks a wallet’s balance and redirects a configurable portion—down to 1 %—to attacker‑controlled addresses, supporting Bitcoin, Litecoin, Dogecoin, Monero, Ethereum and XRP. All infrastructure points to the Aeza Group, a Russian bullet‑proof hosting service sanctioned by the U.S., U.K. and Australia. Recent weeks have seen a surge in ClickFix incidents alongside other stealer campaigns distributing Lumma and Remus variants.

💡 Why It Matters

· By directly emptying crypto wallets, the malware turns credential theft into immediate financial loss, raising the stakes for macOS users and enterprise security teams.

Read full article on thehackernews.com

‘Don’t Buy a House’: Michael Saylor Explains How ChatGPT Helped Generate $15B…

Michael Saylor, founder and Executive Chairman of MicroStrategy, claimed his company generated $15 billion in value last year by using generative AI, notably ChatGPT, to design unprecedented financial structures. Speaking on a podcast, the MIT‑educated aerospace engineer urged listeners to avoid residential real estate, citing inflation, high property taxes, mortgage rates, and maintenance costs as erosion factors. He highlighted that holding fiat currency or taking on long‑term mortgages can diminish wealth, while AI‑driven financial models can create new, frictionless capital assets. The firm’s portfolio includes 847,000 Bitcoin, underscoring its shift toward digital assets.

💡 Saylor’s strategy demonstrates how AI can unlock new investment avenues that outpace traditional assets, reshaping wealth‑building paradigms.

appleinsider.com · Aug 6

One pasted Terminal command opens the door to Mac crypto wallet theft

Researchers discovered a macOS malware that steals cryptocurrency wallet credentials and can drain all or a portion of the wallet. The threat, delivered via a ClickFix attack, tricks users into pasting a command that installs a Go-based payload. Once executed, a Bash script profiles the Mac, downloads a hardware‑specific binary, deletes its temporary file, clears the Terminal, and removes its command from shell history. Huntress identified the infection during a June threat hunt on a monitored Mac, publishing findings on August 6.

💡 The attack demonstrates how social engineering can bypass macOS security, turning a single pasted command into a full wallet‑theft tool. It underscores the need for users to verify command sources before execution.

techradar.com · Aug 6

FBI agent accused of stealing $1 million in crypto — and he…

Patrick Steven Yaroch, a supervisory special agent in the FBI’s Counterintelligence and Espionage Division, was arrested and charged with interstate transportation and receipt of stolen goods. An affidavit alleges Yaroch stole approximately $1 million in cryptocurrency from wallets linked to a foreign adversary investigation. Holding Top Secret clearance, he accessed internal systems, memorized recovery seed phrases, and transferred funds to his personal wallet between November 2024 and July 2026. The theft required no technical hacking, relying solely on his authorized access. Yaroch voluntarily confessed to colleagues, citing internal distress, and attempted to return the funds. He reportedly used ChatGPT to plan his escape from the country before turning himself in. The incident highlights a breach of trust by a senior agent working against Russian adversaries, exposing vulnerabilities in internal security protocols for handling seized digital assets.

💡 The case exposes how high-level security clearances can bypass technical safeguards, allowing insiders to exploit procedural gaps rather than break encryption. It underscores the critical need for stricter internal controls over seized digital assets, as human error and moral failure pose significant risks to national security operations.

mpost.io · Aug 6

Gate Update: Anniversary, Market Dominance, And Platform-Wide Growth Define Gate’s Latest Week

Gate US celebrated its first anniversary on August 1, 2025, expanding its Money Transmitter Licenses from 23 to 36 and now operating in 47 U.S. jurisdictions. The exchange rolled out a trading app, fiat on/off‑ramps, staking, institutional KYB onboarding, and the Gate Card for stablecoin payments on Visa’s network. DefiLlama data shows Gate posted over $124 million in seven‑day net inflows, placing it in the global top three, and recorded $10.484 billion in 24‑hour total open interest, second only to Binance. The week also featured new futures, options, and copy‑trading initiatives, including a UNITREE perpetual futures launch and a 50,000 USDT options challenge.

💡 Gate’s rapid expansion and product diversification solidify its standing as a leading global crypto infrastructure provider, while its robust inflow and open‑interest metrics underscore growing institutional confidence in its platform.

mpost.io · Aug 6

ChangeNOW Brings Martin Masser Into Its Crypto Super App

ChangeNOW has appointed former TON executive Martin Masser as Director of Strategic Partnerships to drive its transition into a crypto super app. Masser brings experience from traditional banking, Web2, and Web3, and will forge relationships with blockchain networks, wallets, fintech firms, and payment providers. The move follows ChangeNOW’s strategy to bundle buying, storing, swapping, trading, sending, receiving, and growing digital assets into a single platform, simplifying the fragmented user experience. His focus will be on building partnerships that enhance product functionality and market visibility.

💡 By unifying disparate crypto tools, ChangeNOW aims to reduce friction for users and businesses alike, potentially setting a new standard for integrated digital‑asset management.

us.headtopics.com · Aug 4

ShopinX Launches SPX Utility Token on BNB Smart Chain for Real-World Spending

ShopinX has launched SPX, a BEP‑20 utility token on the BNB Smart Chain, designed for everyday spending rather than speculation. The token features a fixed supply of one billion units and a revenue‑driven buyback‑and‑burn mechanism to create scarcity. SPX holders can convert tokens into gift cards, vouchers, and discounts at more than 400 merchants, including Amazon, IKEA, Google Play, and Apple. The smart contract passed an independent audit by SolidProof, received KYC verification, and earned a TrustNet score of 88.71, with full on‑chain transparency.

💡 By enabling direct conversion of crypto into widely used retail goods, ShopinX bridges blockchain assets with real‑world commerce, offering a tangible use case that could reshape how consumers interact with digital currencies.