Latest macOS news

Bogus AI downloads tricked macOS users into pasting Terminal commands that dropped the MacSync infostealer. Sophos tracked 50,000+ clicks in days. A parallel InstallFix variant hits developers because curl | sh is a legitimate pattern.

Sponsored Google results for "Claude Code install" lead to pixel-perfect clones of Anthropic's documentation that deliver Amatera Stealer. Push Security found at least 17 fake domains. Both macOS and Windows are targeted.