Security firm Group-IB has uncovered ClickLock Stealer, a new Mac threat that hijacks normal system behavior to pressure victims into handing over passwords and access. ClickLock adds a coercive step when a victim cancels a password prompt or refuses access. The script displays a native-looking macOS password prompt with the victim's username and an Apple icon. The process leaves the password prompt as one of the few usable elements on screen and makes the malware harder to investigate or stop. A Mac that starts closing apps while showing an unexpected password prompt should be shut down rather than given the password, according to the report.