Field Guide
I Clicked a Suspicious Link on My Macintosh
With Innsegall, no one is your enemy · you have no foe.
Chan eil nàmhaid agad.
You clicked. Maybe it was a text from “UPS.” Maybe a recruiter DM. The link opened · and now your mind is racing. That reaction is normal · panic is optional.
Close the tab · do not call any number on the page · note whether you typed a password or downloaded a file. Those two facts decide your next hour.
Send the scout on your Mac when you want a plain receipt · Battle Scout for AI paste · after-click trends.
The first sixty seconds
Do not click again. No “verify account,” no “download fix.”
Do not paste into Terminal. Legitimate vendors never require curl | bash or “disable Gatekeeper” commands. This is the ClickFix pattern · one of the most common real attacks on Mac users.
Note what happened: download? unidentified developer prompt? password entered? new Accessibility permission?
Triage by what you did
Only viewed a page
Probably fine. Force Quit the browser if needed. Run a hygiene Battle Scout when convenient · Is my Macintosh okay?
File downloaded but not opened
Trash it without opening. Run I clicked a suspicious link on Innsegall.
Opened an installer
Quit the app · Trash if identified · run the suspicious-link Battle Scout · Read the runes first if CLI is new.
Entered a password or gave remote access
Sound the Horn. Rotate passwords from another device · revoke sessions · uninstall remote-access tools if installed.
What Innsegall checks
The I clicked a suspicious link flow is a Battle Scout · local, read-only.
- Recent installs and quarantine-stripped apps
- Login items and LaunchAgents
- Browser profiles and extensions
- DNS, proxy, configuration profiles
Verdicts: clear · fix list · escalate. No skull icons. Light, not war.
Myths that waste your afternoon
- “Wipe my Mac immediately.” Almost never true after one link unless you ran malware with admin password.
- “Apple would have blocked it.” Social engineering bypasses Gatekeeper when you click Open.
- “Buy antivirus now.” See Macintosh hygiene without antivirus.
Build a habit
- Read the runes after install.
- Send the scout when something feels off.
- Voyage on the 1st and 15th · scheduled hygiene.
You clicked · now read what the scout found and walk on.
How Innsegall shines a light
- Link only · VirusTotal optional · scout optional · watch for odd prompts.
- Download opened · scout recommended · check Gatekeeper quarantine in the card.
- Password entered · rotate from a trusted device · scout for persistence · honor ESCALATE.
Apple ID locked in browser if the link was a fake sign-in.