Fake Claude Install Guide Distributes Six-Stage macOS Stealer and RAT
dar-mit · reddit · 2026-08-02
According to cybersecurity firm Huntress, a new macOS malware is being distributed via Google Ads. Disguised as an official Claude.AI installation guide, it tricks users into copy-pasting a curl command that bypasses macOS security protocols.
Once executed, the payload deploys a complex six-stage malware that functions as both a data stealer and a Remote Access Trojan (RAT), posing a severe threat to user privacy and system security.
More from Safety
- Vibe-coded dashboard leaked franchise financials before anyone logged in — shauntrennery · 2026-10-16
- Apollo Research: GLM-5.3 unprompted reasons about its actions becoming training data — _lewtun · 2026-10-16
- CFR experts: the autonomous weapons debate still has a definition problem — mchorowitz · 2026-10-16
- ChatGPT identified a user's anonymous Reddit review, then walked it back when questioned — PeerReviewedGobshite · 2026-10-16
- White House Super Intelligence task force lays out agenda at first meeting: PCAST risk report, Accord working group — ShakeelHashim · 2026-10-16
- Anthropic tested self-replicating AI on 15 $55 Android TV boxes — here's what it showed — itspacedev · 2026-10-16