SHub macOS infostealer variant spoofs Apple security updates
Over Security - Cybersecurity news aggregator [Unofficial]
May 18, 2026
A new variant of the 'SHub' macOS infostealer uses AppleScript to show a fake security update message and installs a backdoor.
Discussion in the ATmosphere