CleanMyMac Imposter Site Installs SHub Stealer on Macs

Back Esecurityplanet

CleanMyMac Imposter Site Installs SHub Stealer on Macs

Esecurityplanet • March 9, 2026

Share: View original

A fake CleanMyMac site tricks macOS users into installing SHub Stealer malware that steals credentials and crypto wallets.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fake CleanMyMac Site Distributes SHub Stealer to Target Crypto Wallets A fraudulent CleanMyMac website is deceiving macOS users into downloading SHub Stealer malware, which is designed to steal credentials and crypto wallet information. This campaign specifically targets Apple users, posing a significant risk to their sensitive financial data. 6 sources 63

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)