Ransomware gangs once thrived on infected email attachments and bogus invoices, but security-savvy users and hardened mail gateways have weakened those tactics. Attackers are now focusing on a subtler trick that targets the small checkbox labeled "I'm not a robot" that most people click without thinking.
A
widespread campaign known as MacReaper has compromised more than 2,800
legitimate websites and redirects visitors to an infection process
designed specifically for Apple computers. The operation relies on
visual trust signals, including a convincing fake of Google’s reCAPTCHA,
along with hidden clipboard code that ends with the installation of
Atomic macOS Stealer malware, a data-harvesting infostealer distributed
through Telegram. ---More...