Fake Claude Install Guide Delivers Six-Stage macOS Stealer and RAT, Huntress Finds

Security researchers at Huntress have reverse-engineered a previously undocumented macOS malware family, dubbed MacSync, after tracing an intrusion back to a malicious advertisement masquerading as installation instructions for Anthropic’s Claude AI assistant. According to Huntress, the infection began when a victim searched Google for guidance on installing Claude on a Mac and clicked a sponsored result placed above Anthropic’s own organic listing. The ad led to a page hosted on the legitimate