Phexia, a modular macOS backdoor and infostealer sold to multiple threat actors. Operators deliver it through ClickFix lures. Since May 2026, newer builds have taken their command-and-control (C2) address from a Polygon smart contract, a technique known as EtherHiding. Victims reach fake verification pages through typosquatted domains and shopping listings. The page copies a command […]
This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform