Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

New SHub Stealer Malware Expands Attacks on Browsers and Wallets

Cyber Press
Cyber Press
Published June 5, 2026Original Report

Threat Actors

Malware Families

Excerpt

Threat actors are leveraging fake software websites to distribute Reaper, a significantly updated version of the macOS SHub Stealer. By impersonating popular applications like WeChat and Miro, cybercriminals are successfully deploying this malware to unsuspecting Mac users. The campaign utilizes a streamlined variation of the ClickFix technique that automates malicious code execution, making the attack much harder to spot. SHub Stealer Targets Wallets Traditional ClickFix…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT37PlayINFRASTRUCTUREmlcrosoft.co.comCAPABILITYPlayVICTIMunknown
Adversary(2)
Infrastructure(1)
Capability(1)
Victim

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainmlcrosoft.co.comHighScore 63/100First seen

IOC Relationship Graph

Building graph…