Fake OpenAI Codex download tricks macOS users into installing malware A malware campaign using a sponsored search ad and a fake OpenAI Codex download page to trick macOS users into pasting a malicious command into Terminal has been uncovered by Cato Networks. It’s a variation of ClickFix, a popular social engineering technique that persuades victims to execute the infection step themselves rather than opening a malicious file. The attack starts with a sponsored search result for queries such as “codex macos download.” The ad appears above the genuine OpenAI listing and sends visitors to a page hosted on Google Sites that mimics an OpenAI Codex download portal, complete with options for macOS and Linux. Fake Codex download page hosted on Google Sites (Source: Cato Networks) “We observed…