Threat Intelligence / Actor / Unattributed (ClickFix MaaS Cluster)

Unattributed (ClickFix MaaS Cluster)

Nation: N/A · 1 tracked threat(s) · Categories: MALWARE

Also known as: Odyssey Stealer operators, Atomic Stealer affiliates, ClickFix macOS crew, Matryoshka loader operators

Tracked threats

macOS ClickFix Campaign: AppleScript Stealers Abuse Terminal and Script Editor Before macOS 26 Protections — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence