MAC USERS CAUTION: This is currently the top (sponsored) Google result for searches like "mac flush DNS cache". It is, quite obviously, malware which is not very reliably detected (6/97 on VT). I suspect some variant of Lumma.
Presentation domain got first logged at CRT on June 4th. Dropper domain icloudservers.com is older, but got moved to CF June 2nd.
1/2
@christopherkunz alias dnsreset='sudo killall -HUP mDNSResponder'
😎
@janl There‘s no curl and base64 encoded url in there, this must be wrong!