Fake CleanMyMac Website Uses ClickFix Attack to Deploy SHub Stealer Malware on macOS

Researchers identified a fake CleanMyMac website employing a ClickFix attack to deploy SHub Stealer malware on macOS systems. The malware targets sensitive data, including passwords and cryptocurrency wallets, for exfiltration. The attack leverages deceptive tactics to trick users into installing the infostealer. No specific dates, victim counts, or technical indicators such as CVE IDs were provided in the report. The campaign highlights the risk of fraudulent software distribution sites in macOS environments.