Malicious Ad for Homebrew Leads to MacSync Stealer, (Fri, May 1st)

Introduction As macbooks and mac minis become more popular, we're seeing more campaigns targeting these macOS hosts. Malicious ads have popped up in search results that can lead potential victims to pages that present themselves as legitimate malware but instead are malware. This diary presents one such example from a malicious ad for a page that impersonates Homebrew we saw on Thursday, 2026-04-30. Homebrew is a third-party package manager for macOS, and this page pushes MacSync Stealer malware