The Fake ChatGPT Browser Stealing Mac Passwords

November 2025: a Mac user searches Google for ChatGPT Atlas. The top result is a sponsored link, sitting above the real page, on a site hosted on Google Sites.

"Download for macOS" tells them to paste one line into Terminal. That script asks for their password, then installs the MacSync infostealer, and running it themselves gets around some of Mac's built-in security controls.

#Malvertising #macOS #ChatGPT #ClickFix #Shorts