TI Mindmap HUB
Threat Intelligence Report

How a Google Search for Claude Led to MacSync

📅 August 20, 2026 📰 www.huntress.com 🔍 0 CVE(s) referenced

A deceptive Google search ad led users to a legitimate Claude.ai page disguised as Apple Support, tricking them into executing a terminal command that unleashed the sophisticated MacSync infostealer, capable of stealing credentials, crypto wallet data, and establishing persistent remote access on macOS devices.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle