Mac users beware — this devious new infostealer malware disguises itself as official Apple tools to lure in victims

The menu bar running in macOS.

• SentinelOne uncovers new SHub macOS infostealer variant dubbed Reaper, spread via typosquatted WeChat and Miro domains
• The malware disguises itself with fake Apple and Google update components, establishing persistence and backdoor access
• Reaper targets browser credentials, crypto wallets, password managers, and sensitive documents, with signs of Russian‑speaking operators avoiding CIS systems

Cybersecurity researchers from SentinelOne have discovered a new variant of the notorious SHub macOS infostealer malware called ‘Reaper’.