Skip to content
ThreatCluster

AI-assisted malware campaign targets Mac users via fake Grok AI app

First seen 9 Jan 2026, 20:34 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

Mosyle has identified a macOS malware campaign named SimpleStealth that employs generative AI code. The malware spreads through a counterfeit website masquerading as the Grok AI app, tricking users into downloading a malicious installer. At the time of discovery, the malware was undetected by major antivirus engines.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 184d ago How this analysis works

More articles in this cluster (3)