SHub Reaper stealer, which hides behind fake WeChat and Miro installers, marks a shift from ClickFix social engineering to Apple script-based execution.

Hackers are using fake Apple, Google and Microsoft updates to trick Mac users into installing dangerous password-stealing malware.

Users of macOS, beware: a new password stealer leverages the brands of Apple, Google and Microsoft in a single devastating attack.