Victims browsing GitHub or clicking malicious ads encounter a fake verification prompt. The site copies a malicious command to clipboard, leading to Shamos execution.
Press Cmd-Space to open Spotlight
Type Terminal and press Enter
Press Cmd-V to paste the verification command
Press Enter to execute