New Mac Attack Triggers 83-Hour Password Entry Loop

Hate typing your password? Try doing it for 83 hours straight. A newly discovered macOS malware named ClickLock kills running applications and forces users into a marathon password-entry loop, all designed to steal their credentials. Forbes cybersecurity journalist Davey Winder broke the story on July 18, 2026, warning macOS users that this sophisticated attack exploits frustration and urgency. ClickLock doesn't just ask for the password once—it triggers an endless loop that persists even after correct entry, sometimes lasting over three days. The malware first terminates active apps, creating a sense of crisis that pressures users into repeatedly typing their login credentials. Each keystroke is captured by keylogging functionality embedded in the malware. The 83-hour timeframe is not arbitrary; it's calculated to maximize credential harvesting while evading security scans. Macs have long enjoyed a reputation for relative invulnerability to malware compared to Windows, but that perception has eroded in recent years. ClickLock joins a growing list of macOS-specific threats targeting high-value users—journalists, executives, and developers—who often hold sensitive data. The attack vector is not yet fully disclosed, but initial analysis suggests it may arrive via malicious email attachments or compromised software downloads. Apple has not released an official statement, but security researchers are reverse-engineering the malware to develop detection signatures. The broader implication is clear: as Mac market share grows, so does attacker attention. ClickLock demonstrates how social engineering combined with technical persistence can overcome macOS's built-in protections like Gatekeeper and FileVault. Users are advised to avoid installing software from untrusted sources, enable two-factor authentication everywhere possible, and—paradoxically—never type their password if they suspect a loop is fake. If you find yourself trapped in an endless password prompt, immediately force-quit all suspect processes via Activity Monitor and run a full malware scan. The next milestone will be Apple's patch—likely bundled in a macOS security update—and the inevitable copycat malware that follows.