Fake Codex installer tricks Mac users into pasting malware, Cato finds

Cato Networks Ltd.'s Cato CTRL threat research team reported a macOS attack campaign using a fake OpenAI Codex installer that tricks victims into pasting a malicious command into Terminal, a social engineering technique called ClickFix. The campaign begins with a sponsored Google search result for queries such as 'Codex' and targets Mac users.

Fake Codex installer tricks Mac users into pasting malware, Cato finds By Duncan RileySource: SiliconANGLE https://siliconangle.com Cato Networks Ltd.’s Cato CTRL threat research team today detailed a macOS attack campaign built around a fake OpenAI /glossary/openai Codex installer. The lure ends with the victim opening Terminal and pasting a command that runs the malware, the social engineering pattern known as ClickFix. It begins with a sponsored Google search result for queries such … The post Fake Codex installer tricks Mac users into pasting malware, Cato finds https://siliconangle.com/2026/08/24/fake-codex-installer-tricks-mac-users-into-pasting-malware-cato-finds/ appeared first on SiliconANGLE https://siliconangle.com . Get AI news in your inbox Daily digest of what matters in AI.