Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Hackers Use Fake Claude Guide to Steal Mac Passwords and Hijack Crypto Wallet Apps
Excerpt
Cybercriminals are using fake Claude installation guides to infect Mac users with MacSync, a sophisticated information stealer and remote access trojan (RAT) . The campaign abuses sponsored Google search results and a publicly shared page on the legitimate claude.ai domain, making the lure appear trustworthy. A victim searching for “How to install Claude Code on a Mac” clicked a paid Google advertisement that led to a Claude shared conversation branded as “Apple Support.” The…
Read the original report →Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | 3eb6f92aedf74f109c7b4b0897ec39a8 | High | Score 81/100 | First seen |
| MD5 | d83534dbe2184ba3a0cccb9c19806689 | Medium | Score 53/100 | First seen |
| MD5 | b852d6f8bbdc4e619f67a86176964f4d | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…