Paste This in Terminal: Phexia Turns ClickFix Into a Mac Password Heist
WithSecure says Phexia, a macOS backdoor sold to several criminal groups, spreads through ClickFix Terminal commands, captures the login password and keychain, and resolves its C2 from Polygon smart contracts.