# macsync-a-fake-claude-install-guide-hosted-on-claude-ai-delivers-a: MacSync: A Fake Claude Install Guide Hosted on claude.ai Delivers a macOS Stealer

> MacSync: A Fake Claude Install Guide Hosted on claude.ai Delivers a macOS Stealer is a high-severity credential theft issue in A Fake Claude Install Guide Hosted on claude.ai Delivers a m, an AI agent. It has been exploited in the wild.

- **Canonical URL:** https://catalog.anomity.ai/vuln/macsync-a-fake-claude-install-guide-hosted-on-claude-ai-delivers-a
- **Aliases:** ti-068
- **Severity:** high
- **Attack type:** Credential theft
- **Component:** A Fake Claude Install Guide Hosted on claude.ai Delivers a m (AI agent)
- **Exploited in the wild:** yes
- **Published:** 2026-07-29
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/macsync-a-fake-claude-install-guide-hosted-on-claude-ai-delivers-a

## Summary

Huntress traced a campaign where Google Ads pushed a fake "Apple Support" Claude installation guide that was itself hosted on claude.ai/share, then delivered a six-stage macOS stealer and RAT. Hosting the lure on the vendor's own shared-content domain is what makes it effective: the URL a cautious employee checks looks legitimate, because it is.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| see advisory | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if A Fake Claude Install Guide Hosted on claude.ai Delivers a m is installed or configured on a machine. Check the references for the exact versions.

## How do I fix it?

Tell staff that AI tools are installed only from the vendor's documented download path or through MDM, never from a search ad or an install guide. Note that shared-content domains such as claude.ai/share host user-supplied pages, so vendor-domain URLs are not evidence of vendor-authored content.

## How do I find every machine running A Fake Claude Install Guide Hosted on claude.ai Delivers a m?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run A Fake Claude Install Guide Hosted on claude.ai Delivers a m and which version, then enforce a policy on it.

## References

- article: https://www.huntress.com/blog/macsync-stealer-rat-reverse-engineering

## Related vulnerabilities

- [opencode-console-breach-saved-openai-anthropic-and-google-provider-keys](https://catalog.anomity.ai/vuln/opencode-console-breach-saved-openai-anthropic-and-google-provider-keys) — high
- [symantec-the-aoki-infostealer-now-takes-claude-codex-cursor-copilot](https://catalog.anomity.ai/vuln/symantec-the-aoki-infostealer-now-takes-claude-codex-cursor-copilot) — high
- [manus-one-email-with-a-jsfuck-payload-or-one-shared-project-instruction](https://catalog.anomity.ai/vuln/manus-one-email-with-a-jsfuck-payload-or-one-shared-project-instruction) — high
- [GHSA-wp6x-29qx-fpr7](https://catalog.anomity.ai/vuln/ghsa-wp6x-29qx-fpr7) — high
- [mandiant-hijacked-ai-coding-assistant-session-deploys-shai-hulud-across](https://catalog.anomity.ai/vuln/mandiant-hijacked-ai-coding-assistant-session-deploys-shai-hulud-across) — critical
- [anthropic-september-2026-threat-report-fake-claude-code-installers-and](https://catalog.anomity.ai/vuln/anthropic-september-2026-threat-report-fake-claude-code-installers-and) — high

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=macsync-a-fake-claude-install-guide-hosted-on-claude-ai-delivers-a