Fake Claude Install Guide Delivers Six-Stage macOS Stealer and RAT, Huntress Finds

Security researchers at Huntress have reverse-engineered a previously undocumented macOS malware family, dubbed MacSync, after tracing an intrusion back to a malicious advertisement masquerading as installation instructions for Anthropic's Claude AI assistant. The infection began when a victim searched Google for guidance on installing Claude on a Mac and clicked a sponsored ad, leading to a six-stage stealer and remote access trojan (RAT).