Skip to content
Fake CleanMyMac Site Distributes SHub Stealer to Target Crypto Wallets

Fake CleanMyMac Site Distributes SHub Stealer to Target Crypto Wallets

First seen 9 Mar 2026, 19:41 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 16:10 UTC

A fraudulent CleanMyMac website is deceiving macOS users into downloading SHub Stealer malware, which is designed to steal credentials and crypto wallet information. This campaign specifically targets Apple users, posing a significant risk to their sensitive financial data.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 183d ago How this analysis works

Timeline

2026-03-09
Reports of fake CleanMyMac site distributing SHub Stealer emerge

More articles in this cluster (6)

Following this threat?

Track SHub in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed