Users of macOS, beware: a new password stealer leverages the brands of Apple, Google and Microsoft in a single devastating attack.

Users of macOS, beware: a new password stealer leverages the brands of Apple, Google and Microsoft in a single devastating attack.

Hackers are using fake Apple, Google and Microsoft updates to trick Mac users into installing dangerous password-stealing malware.

While also spoofing all the trusted domains - Apple, Microsoft, and Google - in the same attack

SHub Reaper stealer, which hides behind fake WeChat and Miro installers, marks a shift from ClickFix social engineering to Apple script-based execution.