A malware campaign using a sponsored search ad and a fake OpenAI Codex download page to trick macOS users into pasting a malicious command into Terminal has been uncovered by Cato Networks. It’s a variation of ClickFix, a popular social engineering technique that persuades victims to execute the infection step themselves rather than opening a malicious file. The attack starts with a sponsored search result for queries such as “codex macos download.” The ad appears … More
The post Fake OpenAI Codex download tricks macOS users into installing malware appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
AI supply chain risk is showing up in developer workflows first
HOL Guard: Open-source antivirus for AI agents
Cybersecurity job ads demanding AI skills double in a year