Moonlock Lab

Mac user viewing a fake Claude AI troubleshooting guide from a sponsored Google search result, unknowingly copying a malicious Terminal command that installs MacSync infostealer malware.

News

Hijacked Google Ads and Fake Claude AI Pages Used to Deliver MacSync Malware to macOS Users

ClickFix Campaign Uses Hijacked Google Ads and Fake Claude AI Guides to Infect Mac Users Cybersecurity researchers at Moonlock Lab, the investigative arm...

ByscsecFebruary 18, 2026

Top Insights

Pentagon Personnel Database Breach Exposes Sensitive Data of Millions

Unpatched OnePlus Vulnerabilities Let Malicious Apps Gain Root Access

Critical cPanel Vulnerability Lets Hosting Accounts Execute Code as Root

Moonlock Lab

Hijacked Google Ads and Fake Claude AI Pages Used to Deliver MacSync Malware to macOS Users

Recent Posts

Tampered Ledger Signers Expose Hardware Wallet Supply-Chain Risks in $86 Million Crypto Heist

French Supermarkets Face Major Food Losses After Hackers Hijack Refrigeration Controllers

YMCO Network Leader Admits Role in Laundering Millions Through 15,000 Money Mules

New P7 DarkSword iPhone Exploit Steals Crypto Data and Expands Remote Access

Categories