Fake “Claude Code” Google Ad Delivers MacSync Stealer, Hijacks Ledger Wallets on macOS
Wed Jul 01 2026
Cryptocurrency
Malware
Phishing
Social Engineering
cyberpress.org
A malicious Google Ads campaign impersonating Anthropic’s Claude Code installer is targeting macOS users with a credential-stealing malware strain known as MacSync Stealer. According to research by Giovanni Braccini of Beelzebub Labs, the operation used a fake Google Sites landing page and a multi-stage terminal-based infection chain to steal macOS credentials, browser data, cloud access […]
The post Fake “Claude Code” Google Ad Delivers MacSync Stealer, Hijacks Ledger Wallets on macOS appeared first on Cyber Security News.