Vendor
high
advisory
Rapuncel Infostealer Campaign Impersonates Software Brands
1 rule 3 TTPsThe Rapuncel infostealer campaign uses SEO-poisoned GitHub repositories to deliver malicious installers that deploy a kernel-level EDR killer to disable security products and harvest sensitive data.
LastPass Authenticator +1
infostealer
malware
persistence
defense-evasion
supply-chain
1r
3t
high
advisory
Apple Security Updates — July 2026
4 CVEs 10 IOCsRoundup of Apple security advisories published in July 2026.
PoC
macOS LaunchAgents +46
roundup
4c
10i
updated
high
advisory
SHub macOS Infostealer Variant 'Reaper' Spoofing Apple Security Updates
3 rules 5 TTPs 3 IOCsA new variant of the 'SHub' macOS infostealer, dubbed Reaper, uses AppleScript to display a fake security update message and install a backdoor, ultimately stealing browser data, financial documents, and cryptocurrency wallet information while bypassing Terminal-based mitigations in macOS.
Chrome +19
macos
infostealer
shub reaper
malware
3r
5t
3i