ClickLock Stealer turns a locked screen into a forensics case
Andrea Fortuna
Most macOS infostealer writeups follow a predictable arc: fake CAPTCHA, paste command, credentials gone. ClickLock Stealer, first documented by Group-IB in June 2026, adds a twist that should make any DFIR analyst sit up. The malware locks the victim out of their own desktop, killing every visible...