{"slug": "fake-codex-installer-tricks-mac-users-into-pasting-malware-cato-finds", "title": "Fake Codex installer tricks Mac users into pasting malware, Cato finds", "summary": "Cato Networks Ltd.'s Cato CTRL threat research team reported a macOS attack campaign using a fake OpenAI Codex installer that tricks victims into pasting a malicious command into Terminal, a social engineering technique called ClickFix. The campaign begins with a sponsored Google search result for queries such as 'Codex' and targets Mac users.", "body_md": "# Fake Codex installer tricks Mac users into pasting malware, Cato finds\n\nBy Duncan RileySource:\n\n[SiliconANGLE](https://siliconangle.com)Cato Networks Ltd.’s Cato CTRL threat research team today detailed a macOS attack campaign built around a fake [OpenAI](/glossary/openai) Codex installer. The lure ends with the victim opening Terminal and pasting a command that runs the malware, the social engineering pattern known as ClickFix. It begins with a sponsored Google search result for queries such […]\n\nThe post [Fake Codex installer tricks Mac users into pasting malware, Cato finds](https://siliconangle.com/2026/08/24/fake-codex-installer-tricks-mac-users-into-pasting-malware-cato-finds/) appeared first on [SiliconANGLE](https://siliconangle.com).\n\nGet AI news in your inbox\n\nDaily digest of what matters in AI.", "url": "https://wpnews.pro/news/fake-codex-installer-tricks-mac-users-into-pasting-malware-cato-finds", "canonical_source": "https://www.machinebrief.com/news/fake-codex-installer-tricks-mac-users-into-pasting-malware-c-z9db", "published_at": "2026-08-24 12:30:19+00:00", "updated_at": "2026-08-24 13:16:01.951218+00:00", "lang": "en", "topics": ["ai-tools", "ai-safety"], "entities": ["Cato Networks Ltd.", "Cato CTRL", "OpenAI", "Codex", "Google"], "alternates": {"html": "https://wpnews.pro/news/fake-codex-installer-tricks-mac-users-into-pasting-malware-cato-finds", "markdown": "https://wpnews.pro/news/fake-codex-installer-tricks-mac-users-into-pasting-malware-cato-finds.md", "text": "https://wpnews.pro/news/fake-codex-installer-tricks-mac-users-into-pasting-malware-cato-finds.txt", "jsonld": "https://wpnews.pro/news/fake-codex-installer-tricks-mac-users-into-pasting-malware-cato-finds.jsonld"}}