# Fake Codex installer tricks Mac users into pasting malware, Cato finds > Source: > Published: 2026-08-24 12:30:19+00:00 # Fake Codex installer tricks Mac users into pasting malware, Cato finds By Duncan RileySource: [SiliconANGLE](https://siliconangle.com)Cato Networks Ltd.’s Cato CTRL threat research team today detailed a macOS attack campaign built around a fake [OpenAI](/glossary/openai) Codex installer. The lure ends with the victim opening Terminal and pasting a command that runs the malware, the social engineering pattern known as ClickFix. It begins with a sponsored Google search result for queries such […] The post [Fake Codex installer tricks Mac users into pasting malware, Cato finds](https://siliconangle.com/2026/08/24/fake-codex-installer-tricks-mac-users-into-pasting-malware-cato-finds/) appeared first on [SiliconANGLE](https://siliconangle.com). Get AI news in your inbox Daily digest of what matters in AI.