New infostealer malware hides on Mac disguised as official Apple tools

Security researchers say a new macOS infostealer called SHub Reaper disguises itself as Apple security software to steal passwords, cryptocurrency wallets, and sensitive files. HTML source code showing the construction of the malicious AppleScript. Image credit: SentinelOne The malware abuses AppleScript and legitimate macOS system processes to hide its activity and avoid some traditional malware scanning tools.