Skip to content
Section C · The archive · Dispatch
← The archive

malware · Mon 27 Jul 2026 · 06:25 UTC

From Google Ads to Terminal: Dissecting an Apple Support Impersonation Campaign Abusing Claude Share.

Filed UTCSource RDT ↗

&#32; submitted by &#32; <a href="https://www.reddit.com/user/dinkoism"> /u/dinkoism </a> <br /> <span><a href="https://derivai.substack.com/p/fake-claude-code-installer-macsync-malware">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1v7s9hw/from_google_ads_to_terminal_dissecting_an_apple/">[comments]</a></span>…

Get the next one first.

Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.