Cybersecurity experts have discovered a new phishing campaign that is targeting Mac users. According to a report by the cybersecurity company LayerX Labs, experts have discovered that hackers using this phishing campaign, which originally attacked Windows users, are now targeting Mac users after Windows users received an Edge browser update. With these phishing attacks, hackers are reportedly tricking users into believing their Mac is compromised to steal their username and password.
How hackers are using this phishing campaign against Mac users
The report said that in this phishing campaign, hackers use fake security warnings that pop up on users’ screens while they are browsing, displaying messages that their Mac is “compromised” and “locked.”
To raise panic – a tactic used by sophisticated attackers – hackers make the webpage appear frozen. A window then prompts users to enter their Mac’s username, password, and phone number for supposed "support."
In the report, LayerX Labs shared a screenshot of the phishing attempt, though attackers may change the alert to make it more convincing, cybersecurity experts warned.
The fake warning has noticeable red flags, such as a design that doesn’t match Apple’s style and the incorrect formatting of “macOS”, however, they may not be apparent for many users.
As per the report, users can encounter these hackers accidentally by mistyping URLs in their browsers. These typos redirect them to compromised domain parking pages hosting the phishing scam.
The report also noted that the phishing attack initially targeted Windows users. However, after Microsoft, Google and Mozilla introduced new security measures in their browsers to block the threat, attackers shifted their focus to Mac users.
How Mac users can protect themselves from this phishing campaign
In the report, the cybersecurity experts have also advised users to verify URLs before visiting websites and bookmark frequently used ones to avoid typing errors.
It also suggests using a search engine to find websites, as this can help identify typos and direct users to the correct URL. Additionally, the report also highlights the importance of installing Apple's security updates promptly to stay protected.