{
  "entry": {
    "kind": "vuln",
    "slug": "macsync-a-fake-claude-install-guide-hosted-on-claude-ai-delivers-a",
    "name": "macsync-a-fake-claude-install-guide-hosted-on-claude-ai-delivers-a",
    "vendor": "A Fake Claude Install Guide Hosted on claude.ai Delivers a m",
    "description": "Huntress traced a campaign where Google Ads pushed a fake \"Apple Support\" Claude installation guide that was itself hosted on claude.ai/share, then delivered a six-stage macOS stealer and RAT. Hosting the lure on the vendor's own shared-content domain is what makes it effective: the URL a cautious employee checks looks legitimate, because it is.",
    "website": "https://www.huntress.com/blog/macsync-stealer-rat-reverse-engineering",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "agent",
    "updatedAt": "2026-07-29",
    "risk": {
      "score": 75,
      "band": "high",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "macsync-a-fake-claude-install-guide-hosted-on-claude-ai-delivers-a",
      "aliases": [
        "ti-068"
      ],
      "title": "MacSync: A Fake Claude Install Guide Hosted on claude.ai Delivers a macOS Stealer",
      "summary": "Huntress traced a campaign where Google Ads pushed a fake \"Apple Support\" Claude installation guide that was itself hosted on claude.ai/share, then delivered a six-stage macOS stealer and RAT. Hosting the lure on the vendor's own shared-content domain is what makes it effective: the URL a cautious employee checks looks legitimate, because it is.",
      "severity": "high",
      "cvss": {
        "score": null,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Credential theft"
      ],
      "componentType": "agent",
      "component": {
        "name": "A Fake Claude Install Guide Hosted on claude.ai Delivers a m",
        "vendor": null,
        "package": null,
        "ecosystem": null,
        "catalogSlug": null
      },
      "affected": [
        {
          "range": null,
          "fixed": null
        }
      ],
      "exploited": true,
      "exploitPublic": false,
      "publishedAt": "2026-07-29",
      "modifiedAt": "2026-07-29",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://www.huntress.com/blog/macsync-stealer-rat-reverse-engineering"
        }
      ],
      "mitigation": "Tell staff that AI tools are installed only from the vendor's documented download path or through MDM, never from a search ad or an install guide. Note that shared-content domains such as claude.ai/share host user-supplied pages, so vendor-domain URLs are not evidence of vendor-authored content.",
      "detectedByAnomity": true
    }
  }
}