Hackers have a new tool called ClickFix. The new attack vector combines fake human-verification prompts with malware, trying to trick users into running Terminal commands that bypass macOS security.
Victims may remain unaware that their UPI account has been taken over on another device as the attack happens silently, as per researchers.