Malware found spreading through sponsored ad on X
Malware spreading through sponsored ads on X has security experts on alert.
📍 How it ended
Verified ads on X were found to be spreading Mac malware. Simultaneously, weaponized Google ads for a fake Claude Code delivered MacSync Stealer to hijack macOS and Ledger wallets.
The story quieted without a definitive conclusion in the coverage.
Epilogue added 21d ago, after coverage quieted.
Answered
What is the name of the malware?
The malware is named MacSync Stealer.
Which platforms are affected?
The malware targets macOS users. Some reports indicate it also affects Ledger wallets.
How is the malware spreading?
The malware is spreading through sponsored ads on X. The ads are verified, raising concerns about the security of X's ad platform.
Where it stands
A malware campaign is spreading through sponsored ads on X. The malware, MacSync Stealer, targets macOS users. It is disguised as a fake Claude Code Google ad. Coverage from Security Boulevard, Malwarebytes, and 9to5Mac emphasizes the use of verified ads to spread malware. CyberSecurityNews and gbhackers.com report that the malware hijacks macOS systems.
Cyberpress.org adds that it also targets Ledger wallets. Huntress discusses broader dark web tactics. The malware is spreading through ads on X. Coverage does not yet specify how many users have been affected or how the malware operates once installed. The ads are verified, raising concerns about the security of X's ad platform.
The malware targets macOS users, with some reports indicating it also affects Ledger wallets. Watch for updates on the extent of the malware's spread. Coverage does not yet specify how the malware operates once installed. Look for responses from X and Google regarding the security of their ad platforms.
Synthesized by Archynetys from the headlines below under a strict no-invention contract. ✓ fact-checked: all claims supported by sources Updated 24d ago.
Coverage (7)
- Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts Security Boulevard · 26d ago
- The Hacker's 2026 Playbook: Dark Web Tactics Targeting You Huntress · 26d ago
- Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts Malwarebytes · 26d ago
- MacSync Stealer Hijacks macOS via Fake Claude Code Google Ads gbhackers.com · 26d ago
- A Weaponized Google Ad Install Malicious Claude Code to Hijack Entire macOS CyberSecurityNews · 26d ago
- Fake “Claude Code” Google Ad Delivers MacSync Stealer, Hijacks Ledger Wallets on macOS cyberpress.org · 26d ago
- Malware found spreading through sponsored ad on X 9to5Mac · 26d ago
The coverage curve
How fast coverage is spreading — measured hourly from article rate × source diversity. How this works →
Topics
Related trends
Hugging Face wants $100mn of compute from OpenAI
Hugging Face seeks $100 million in OpenAI compute amid fresh cyber‑attack concerns
Ariana Grande Sues Over Yearslong Hacking Campaign Targeting Inner Circle
Ariana Grande has initiated legal action against alleged hackers following a multi-year campaign targeting her inner circle and unreleased creative assets.
Microsoft launches its first cybersecurity model, plus a new agentic cybersecurity system
Microsoft is challenging industry leaders with a new in-house cybersecurity AI model and an agentic system designed to reduce costs.
Apple Releases iOS 26.6 and iPadOS 26.6 With iOS 27 Optimizations
Apple's iOS 26.6 and iPadOS 26.6 roll out with security patches, new features, and AI‑backed fixes ahead of the upcoming iOS 27.
Microsoft Unveils A.I. Cybersecurity Tools
Microsoft's debut AI-driven cybersecurity suite signals a rapid shift toward autonomous threat defense.
Misleading AI-generated doctors pose ‘huge danger to public safety’
Hyper-realistic AI-generated influencers are proliferating across social media platforms, posing safety risks through the promotion of unverified medical advice.