Skip to content
Beware! Fake CleanMyMac Website can steal your credential through malicious infostealers.

Beware! Fake CleanMyMac Website can steal your credential through malicious infostealers.

Reddit /u/NeuraCyb-Intel March 10, 2026

Mac users searching for a trusted system optimization tool are being targeted in a new malware campaign that impersonates the popular macOS utility CleanMyMac. Security researchers warn that a fraudulent website is distributing SHub Stealer, a credential-stealing malware capable of harvesting passwords and compromising cryptocurrency wallets. The campaign relies heavily on social engineering. Instead of exploiting technical vulnerabilities, attackers convince victims to manually run a malicious command in the macOS Terminal, allowing the malware to install while appearing to be part of a legitimate setup process. submitted by /u/NeuraCyb-Intel [link] [ ]

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)