Mac malware doesn’t always need to break macOS security. Increasingly, it just needs you to click, install or paste the wrong thing.
That mean even a fully updated Mac can be exposed to a scam. Fake CAPTCHAs, malicious ads and bogus installers all push people to bypass macOS protections themselves.
Here’s what to watch out for.
Mac malware shifts toward browser scams
The biggest threat to your Mac might not be a sophisticated hacker exploiting some obscure security flaw. It might be a fake CAPTCHA telling you to prove you’re human by pasting a command into Terminal. That’s the unsettling evolution of Mac malware in a nutshell. Instead of trying to defeat Apple’s security defenses, scammers increasingly trick users into lowering those defenses themselves.
Unfortunately, the strategy is working, with adware surging in recent threat detections and malicious apps even slipping through Apple’s notarization process. It exposes an uncomfortable weakness in the Mac’s vaunted security model: All the safeguards in the world can’t protect you from software you willingly invite inside.
Bitdefender’s latest macOS Threat Landscape Report, published Thursday, analyzed more than 1.5 billion security events. Spanning from August 2025 to July 2026, adware showed the biggest jump, rising from 22.6% to 34.4% of detections. (That’s compared to Bitdefender’s previous report, but excludes web and document threats.)
Trojans currently remain the largest category at 45.2%, down from 51.8%. Potentially unwanted ads slipped from 25.3% to 20.4%. The security firm says the change aligns with malicious ads, fake ads and other social engineering scams.
One thing to note is that these figures count blocked detections, not confirmed infections. They show how the mix of threats changed and do not necessarily mean more Macs are compromised.
ClickFix turns you into the installer
ClickFix is the clearest example of this approach. A fake CAPTCHA, update prompt or repair notice will tell you to open Terminal and paste a command.
Bitdefender says that it can download and execute malware with your own permissions. And because you run the command, no software flaw is needed.
Any app that asks you to open Terminal and paste a command as part of its installation process should set off huge alarm bells. Legitimate Mac software has no reason to ask users to execute unfamiliar commands to install or activate it.
This is a common trick used by malware distributors because it gets you to bypass macOS security protections and effectively install the malicious software yourself. If an installer, website or pop-up tells you to paste something into Terminal, stop immediately. It’s almost certainly a scam.
It’s also a commonly used one. In August, Microsoft documented a large ClickFix campaign. Researchers confirmed more than 250 front-end domains that fingerprint visitors before showing the trap, and the lure appears mainly to browsers that look like real Macs. It makes the campaign harder for security scanners to spot.
Infostealers are still a small slice of detections, but they do matter. Excluding a one-month spike in June this year, their share rose from 0.9% to 1.5% of monthly Mac reports. These tools go after browser passwords, session cookies, keychain data and crypto wallets.
Bitdefender didn’t separate ClickFix from other detections, so it can’t say how much of that rise came from the technique.
Apple’s Terminal protections have limits
Apple added a Terminal paste warning in macOS Tahoe 26.4, but the company says the alert appears only under specific conditions, and the user must not have opened Terminal in more than 30 days.
macOS must also detect no common developer tools like Apple’s Xcode, and the paste must come from an app like a web browser, Messages or Mail.
Apple’s other protections work differently. Pasteboard command blocking uses XProtect to check pasted commands in any terminal app, including third-party ones.
Signed apps can still carry malware
Bitdefender’s report also highlights malware that passed Apple’s notarization checks. In June, Palo Alto Networks’ Unit 42 listed three apps called PodcastsLounge, PDF-Brain and PDF-Ninja. All had valid Apple Developer ID signatures and passed notarization.
These apps contained a backdoor called FlutterShell, which loads instructions from attacker-controlled servers through embedded web content. That allowed attackers to change the malware’s behavior without recompiling or redistributing the app.
In practice, they mostly hijacked Chrome’s search settings to serve ads. Still, the malware could run shell commands and read files.
Two of these also offered working AI document summaries, but files were routed through an attacker’s servers before reaching an AI service.
The bottom line: Notarization isn’t a permanent guarantee. Bitdefender says it’s a snapshot, and Apple can revoke approvals and push XProtect updates later.
Slow down before you paste anything
Even a fully patched Mac can still fall for a convincing scam. Bitdefender’s advice is simple. Keep macOS and apps updated, and download software only from trusted sources. Always treat unexpected browser prompts and Terminal instructions with utmost suspicion.
Apple’s support page adds a rule of thumb. Never paste a command unless you’re certain what it does and where it came from.
Anurag Chawake is a tech-focused writer specializing in smartphones, apps and consumer technology. His interest in computers began during the Windows 98 era, eventually leading him to explore everything from operating systems to mobile devices and PC hardware. Anurag previously contributed to The Indian Express, covering Apple, Android, gaming and the broader technology landscape.
