New SHub Malware Variant 'Reaper' Targets macOS Users with Fake Google Update

• •The 'Reaper' variant of SHub malware uses a fake Google update for persistence.
• •It targets macOS users by disguising itself as trusted software updates.
• •The malware enhances data theft capabilities and maintains stealthy access.

A new variant of the SHub macOS infostealer, named 'Reaper', has been detected using a fake Google Software Update to maintain persistence on infected systems. This malware targets macOS users by masquerading as legitimate software updates, specifically leveraging trusted brands like Google, WeChat, and Miro to deceive users. The Reaper variant enhances the original SHub's capabilities, including stealthier delivery methods and improved data theft mechanisms. Users may unknowingly install this malware, which can lead to significant data breaches. The infection chain is particularly concerning due to its ability to remain hidden and maintain access over time. Current reports indicate that this threat is actively being observed in the wild, affecting a growing number of macOS devices.