New Password Stealer Spoofs Apple, Google And Microsoft In 1 Attack

InnovationCybersecurityNew Password Stealer Spoofs Apple, Google And Microsoft In 1 AttackByDavey Winder,Senior Contributor.Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst.Follow AuthorMay 18, 2026, 10:29am EDT--:-- / --:--This voice experience is generated by AI. Learn more.This voice experience is generated by AI. Learn more.macOS infostealer spoofs Apple,Google and Microsoft in a single attack.NurPhoto via Getty ImagesJust because you use macOS does not mean you are off of cybercriminals’ radar. One particularly clever new threat, a variant of an already well-known and dangerous password stealer, has been found to change disguises at every stage of the infection chain. Security researchers have now warned that it uses a payload hosted on a typo-squatted Microsoft domain, is delivered as an Apple security update, and even adds persistence to the exploit mix via a spoofed Google Software Update directory. Here’s what you need to know about the latest SHub Reaper multi-stage attack chain. ForbesSeniors Targeted—FBI Issues Cyber Attack Advice For The Over 60sBy Davey WinderThe Latest SHub Reaper macOS Password Stealer DissectedWhile Microsoft is stealing the security limelight for all the wrong reasons right now, with an actively exploited Exchange Server zero-day confirmed and an angry Windows hacker dropping more exploits at a rate of knots, macOS users should not be complacent.While there are fewer active security threats facing users who have adopted an Apple ecosystem rather than a Microsoft one, that by no means implioes that there are none. From the Atomic macOS Stealer replete with an embedded backdoor, to the Infiniti Stealer targeting passwords, bringing the ClickFix threat to the Mac. Now you can add another macOS “stealer” to the mix in the shape of Shub Reaper, traditionally also using the ClickFix commands to terminal technique, but, according to a May 18 analysis f...