# Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th)

Source: [SANS Internet Storm Center, InfoCON: green](https://isc.sans.edu/diary/rss/33518) · 2026-11-13 · Security
Page: https://themorning.dev/story/macfinger-clickfix-campaign-sends-downthedrain-infostealer-for-macos-fri-nov-13t-6b2047aad824de08
Kind: security · Impact: medium

## In brief

- SANS Internet Storm Center reports a ClickFix campaign named Macfinger that delivers the DownTheDRAIN infostealer to macOS.
- The source provides only a headline and no summary, so further technical details are unavailable.

## Why it matters

macOS users, including developers on Macs, may be targeted by ClickFix-style lures that install an infostealer. The source gives no further technical detail.

## Timeline

- 2026-11-13: SANS Internet Storm Center reports the Macfinger ClickFix campaign delivering DownTheDRAIN to macOS

## Coverage

- [Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th)](https://isc.sans.edu/diary/rss/33518) — SANS Internet Storm Center, InfoCON: green, 2026-11-13

Tags: macos, infostealer, malware, clickfix, security

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev