North Korea’s Lazarus Group has extended its ClickFix social engineering campaign to macOS, specifically targeting executives and privileged users at organizations with significant Apple hardware deployments. The attack tricks users into manually running malicious commands by presenting convincing fake error or CAPTCHA dialogs, bypassing traditional technical defenses and exploiting human behavior. Organizations with Mac-heavy environments and high-value personnel face elevated risk of credential theft, persistent access, and potential financial or intellectual property loss consistent with Lazarus Group’s established objectives.