SHub macOS infostealer variant spoofs Apple security updates
…the command-and-control (C2) server and exits without infecting the system. If the host is not Russian, Reaper retrieves and executes the malicious AppleScript with the data theft routine using the…
