The SHub Reaper stealer, which hides behind fake WeChat and Miro installers, marks a shift from ClickFix social engineering to Apple script-based execution.
Stealer Spoofs Google, Microsoft & Apple, Then Backdoors macOS
Summary + source link. No paywalls, no tracking.