Tag: mfa bypass is not relevant here so removed and replaced with supply chain

Google Sites Abused to Deliver macOS Malware via Fake Codex Download

Malicious actors are tricking users into downloading macOS malware by hijacking Google searches for "Codex macOS download" and using fake Google Sites pages that mimic the real OpenAI Codex download portal. These convincing sites offer both macOS and Linux downloads, but only deliver a Mach-O payload to unsuspecting macOS users.