From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide

In this article 1. Activity overview 2. How ClickFix works 3. Campaign overview 4. ClickFix moved from open pages to fingerprinting gates 5. The fingerprinting gate 6. Mitigation and protection guidance 7. Indicators of compromise IOC 8. References 9. Learn more Microsoft Threat Intelligence...

Malware in 2025 spread far beyond Windows PCs

This blog is part of a series highlighting new and concerning trends we noticed over the last year. Trends matter because they almost always provide a good indication of what 's coming next. If there’s one thing that became very clear in 2025, it’s that malware is no longer focused on Windows...