MacSync Stealer: How a Google Search for Claude Led to a macOS Infostealer

Huntress Version 1 original current

Imported from official source

Huntress SOC analysts reverse engineer MacSync Stealer, a macOS infostealer spread through fake Claude Code download pages. Watch the full analysis.

This version

Version
1 of 1
Recorded
September 20, 2026 19:55
Change
Initial
Content hash
6a8074fc595c9b8d26148ddad3fad00d
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.