SHub Reaper impersonates Apple, Google, and Microsoft in one MacOS attack chain

A recently discovered macOS infostealer campaign leverages the trust users have in major tech companies to evade detection. The SHub Reaper malware variant impersonates Apple, Google, and Microsoft at various stages of its attack chain, targeting Mac users. This malware family has been known to use fake installers and social engineering tactics, such as prompting victims to enter commands into Terminal. The Reaper variant's ability to mimic multiple reputable companies in a single attack chain makes it a significant threat. Researchers at SentinelOne have detailed this new variant, which exploits user trust to gain access to sensitive information¹. The evolving nature of this malware family, including its ability to adapt and impersonate major tech companies, poses a considerable risk to Mac users. This development matters to security practitioners because it highlights the need to stay vigilant against increasingly sophisticated social engineering attacks that can slip past traditional defenses.