MacSync: A Fake Claude Install Guide Hosted on claude.ai Delivers a macOS Stealer
MacSync: A Fake Claude Install Guide Hosted on claude.ai Delivers a macOS Stealer is a high-severity credential theft issue in A Fake Claude Install Guide Hosted on claude.ai Delivers a m, an AI agent. It has been exploited in the wild.
Is A Fake Claude Install Guide Hosted on claude.ai Delivers a m running on your developers' machines? Anomity finds every device with this AI agent installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
macsync-a-fake-claude-install-guide-hosted-on-claude-ai-delivers-a- Severity
- high
- Attack type
- Credential theft
- Component
- A Fake Claude Install Guide Hosted on claude.ai Delivers a m · AI agent
- Known exploited
- Yes
- Published
- Last verified
What is this vulnerability?
Huntress traced a campaign where Google Ads pushed a fake "Apple Support" Claude installation guide that was itself hosted on claude.ai/share, then delivered a six-stage macOS stealer and RAT. Hosting the lure on the vendor's own shared-content domain is what makes it effective: the URL a cautious employee checks looks legitimate, because it is.
Am I affected by this vulnerability?
You are affected if A Fake Claude Install Guide Hosted on claude.ai Delivers a m is installed or configured on a machine. Check the references for the exact versions.
How do I fix it?
Tell staff that AI tools are installed only from the vendor's documented download path or through MDM, never from a search ad or an install guide. Note that shared-content domains such as claude.ai/share host user-supplied pages, so vendor-domain URLs are not evidence of vendor-authored content.
How do I find every machine running A Fake Claude Install Guide Hosted on claude.ai Delivers a m?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run A Fake Claude Install Guide Hosted on claude.ai Delivers a m and which version, then enforce a policy on it.