Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware

Microsoft tracked a ClickFix operation involving more than 250 front-end domains. The domains fingerprint visitors server-side before deciding whether to display a malware lure. The analyzed chain ended with the AMOS infostealer; the wider domain cluster has also distributed MacSync.