Back Cybersecuritynews

Hackers Use Fake CleanMyMac Site to Deploy SHub Stealer and Hijack Crypto Wallets

Cybersecuritynews •Tushar Subhra Dutta • March 9, 2026

A convincing fake website posing as the popular Mac utility CleanMyMac is actively pushing dangerous macOS malware called SHub Stealer onto unsuspecting users. The site, hosted at cleanmymacos[.]org, has no connection to the real CleanMyMac software or its developers, MacPaw. Once inside a system, SHub Stealer harvests saved passwords, browser data, Apple Keychain contents, cryptocurrency […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fake CleanMyMac Site Distributes SHub Stealer to Target Crypto Wallets A fraudulent CleanMyMac website is deceiving macOS users into downloading SHub Stealer malware, which is designed to steal credentials and crypto wallet information. This campaign specifically targets Apple users, posing a significant risk to their sensitive financial data. 6 sources 63

Extracted Entities

Hackers Use Fake CleanMyMac Site to Deploy SHub Stealer and Hijack Crypto Wallets

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)