New scam mimics trusted apps and updates, tricking users into handing over passwords and sensitive data during everyday actions.
Everything appears routine, but once you click “run” or enter your password, you may be handing control over without realizing it. According to SentinelOne’s analysis, that is why these attacks are so effective—they rely on normal behavior, not obvious mistakes.
It can steal passwords, personal files, and financial information. Victims are tricked into approving the attack themselves. What stands out is how the attack uses multiple layers of impersonation. SentinelOne researchers say it can:Hide activity in folders that resemble Google software.
On May 18, SentinelOne identified a new Mac malware strain called “Reaper” that spreads through fake apps and update prompts, part of a broader shift towardAnyone who downloads apps or follows update prompts outside official channels could be at risk, especially if they enter their password when asked unexpectedly. The threat is part of the “SHub” family of information‑stealing malware, which is designed to capture passwords, financial data and sensitive files.
This latest threat, known as “SHub Reaper,” is designed to blend into everyday activity on a Mac. You might come across what looks like a normal download—for example, a popular messaging or work app. Once you click through, the attack often unfolds in stages.
First, a download or prompt appears that looks genuine, possibly an installer or a message telling you to run an update. Next, you may see what looks like a normal Apple security message. It asks you to take action—sometimes even to enter your password. SentinelOne researcher Phil Stokes said the malware can quietly collect sensitive information, including saved passwords, financial files, and data stored in browsers.
One stage may look like a Microsoft-related download. Another may look like an Apple update. Later, parts of it hide in folders that resemble Google software. That constant shape‑shifting is designed to lower suspicion, with each step made to look like something you already trust.
In some cases, the malware can also stay on your device after the initial install, allowing attackers to keep accessing information or add more malicious tools later. Macs have long been seen as relatively safe, but attacks like this show they are now a clear target. The shift toward impersonating trusted brands highlights howHow To Stay SafeStick to official sources such as the Mac App Store or verified company websites.
Be cautious if your Mac suddenly asks for a password during a download. Keep your system up to date with official updates. Related Podcasts
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Apple’s Privacy Standards May Be Eroding as New Siri Features Roll Out, Report SaysApple has been a little quiet about where your Siri chatbot data will live and be processed.
Read more »
TONY HALE, BEVERLY D'ANGELO & APPLE MARTIN BOARD NANCY MEYERS' NEW FILM FOR WARNER BROS.A new film starring Tony Hale, Beverly D'Angelo, and Apple Martin has been added to the Warner Bros. movie lineup. They all board Nancy Meyers' latest film.
Read more »
Apple TV's New Cyberpunk Show Will Make Every Other Sci-Fi Series Look SmallNeuromancer could be the biggest sci-fi show yet
Read more »
Apple's new accessibility feature lets Vision Pro users control a wheelchair with their eyesApple is previewing new accessibility features including Apple Intelligence-powered updates like natural language voice input.
Read more »