Stealer Spoofs Google, Microsoft & Apple, Then Backdoors macOS

# AI News Summary **Attack Method of SHub Reaper Stealer Evolves** SHub Reaper is a novel type of malicious stealer whose attack strategies have recently undergone a significant shift. Previously relying mainly on ClickFix social engineering techniques for propagation and execution, it has now transitioned to using an AppleScript-based execution method, marking an important evolution in its attack tactics. **In terms of propagation methods**, SHub Reaper employs a highly covert disguise strategy, hiding itself within fake installers for commonly used software such as WeChat and Miro. By masquerading as legitimate application installers, it lures users into downloading and executing malicious code, thereby bypassing their security awareness. **Regarding technical aspects**, the malware's shift from the ClickFix social engineering model to AppleScript execution is noteworthy. ClickFix was previously a common social engineering attack vector, and the move to AppleScript suggests that attackers are exploring new execution pathways, potentially leveraging the native scripting capabilities of macOS to achieve more stealthy malicious operations.