TF-MAL-osx.unidentified_001

Description

ThreatFox malware family `osx.unidentified_001`. Printable name: Unidentified macOS 001 (UnionCryptoTrader).

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• New infostealer malware hides on Mac in disguise - AppleInsider
  web:appleinsider.com

  Security researchers say a new macOS infostealer called SHub Reaper disguises itself as Apple security software to steal passwords, cryptocurrency wallets, and sensitive files.

  2026-05-22 05:29 UTC
• New macOS Malware Campaign Abuses Google Ads and Claude.ai Chats
  web:cyberpress.org

  The primary targets of this campaign are developers and technical users attempting to integrate Claude AI into their local macOS systems.

  2026-05-22 05:29 UTC
• New ClickFix Attack Targets macOS Users With Fake Disk Cleanup and ...
  web:cybersecuritynews.com

  ClickFix tricks macOS users into pasting Terminal commands that secretly install infostealer malware via fake help posts.

  2026-05-22 05:29 UTC
• Bybit Security exposes macOS malware campaign targeting users ... - Finbold
  web:finbold.com

  Bybit has disclosed details of a multi-stage macOS malware campaign targeting users searching for "Claude Code".

  2026-05-22 05:29 UTC
• macOS Malware Abuses Google Ads and Claude Shared Chats to ... - GBHackers
  web:gbhackers.com

  A sophisticated malvertising campaign targeting macOS users by exploiting Google Ads and legitimate Anthropic Claude shared chats.

  2026-05-22 05:29 UTC
• Unidentified macOS 001 (UnionCryptoTrader) (Malware Family)
  web:malpedia.caad.fkie.fraunhofer.de

  Details for the Unidentified macOS 001 (UnionCryptoTrader) malware family including references, samples and yara signatures.

  2026-05-22 05:29 UTC
• ThreatFox | miov2iaiaoubqosiqoiajwowiwjso.online
  web:threatfox.abuse.ch

  Unidentified macOS 001 (UnionCryptoTrader) IOC: miov2iaiaoubqosiqoiajwowiwjso.online (domain)

  2026-05-22 05:29 UTC
• MAR-10322463-3.v1 - AppleJeus: Union Crypto | CISA
  web:www.cisa.gov

  body#cma-body { font- family : Franklin Gothic Medium, Franklin Gothic, ITC Franklin Gothic, Arial, sans-serif; font-size: 15px; } table#cma-table { width: 900px ...

  2026-05-22 05:29 UTC
• ClickFix campaign delivers Mac malware via fake Apple page
  web:www.helpnetsecurity.com

  A new ClickFix-style attack targeted Mac users via a fake Apple-themed webpage offering instructions on how to "reclaim disk space."

  2026-05-22 05:29 UTC
• ClickFix campaign uses fake macOS utilities lures to deliver ...
  web:www.microsoft.com

  Threat actors are targeting macOS users with fake utility fixes that trick them into running malicious Terminal commands. This campaign evades traditional defenses by stealing credentials, wallets, and sensitive data.

  2026-05-22 05:29 UTC

Only Available for Registered Users. Sign in to view.