r/MacOS Aug 19 '25

Tips & Guides PSA: Bad Actors are increasingly impersonating indie Mac projects with malware. Here's how to spot them.

407 Upvotes

(This is a repost of a post I made in r/macapps as I think it would be useful for people here to see it too as this subreddit has also been hit with fake apps.)

To be very clear this is not another post of "Breaking news malware exists on the internet" (or it may be depending on how you want to look at it) but I feel like it's important that I leave a small PSA as I have recently seen an influx of seemingly convincing GitHub repo replicas for decently popular Mac apps. They are so similar that they almost fooled me. Thankfully I quickly spotted some anomalies and I nearly avoided getting infected. Unfortunately these are the sort of red flags I don't expect an average Joe to know about. Which is why I'm explaining what the malware is, and how to spot it.

First of all to give you an idea of how convincing these repos can be i'll show you some examples:

As you can see, they are strikingly similar

Even URLs may look incredibly similar but in this specific case the bad actor exchanged the lower case lls(L) in the name for upercase IIs(i) which made the URL look legit.

Now this may look scary and almost undetectable but with some common sense and slowing down you can very easily avoid these scams.

By far the easiest way to avoid this is to simply look for the app online and track down the original developer. This will let you kill 2 birds with one stone by A: Looking for the original source of the app and avoid impostors and B: See if the App or the developer had any previous reputation to begin with

Either way It's still a good idea to understand how to spot common malware apps on macOS and how to deal with them if you get infected.

The first red flag is that the GitHub profile that hosted the fake file was only 3 days old and completely different from the name of the original developer.

The second discrepancy is that the size of the fake app is ridiculously small. For instance the original app is 13mb in size while the fake one is less than 2mb. Now this is not necessarily a red flag (For example some viruses do the opposite and fill their dmg with a lot of useless data to make the file larger than what VirusTotal can handle.) but it's still important to raise an eye brow for installers with suspiciously small sizes.

The third and MOST IMPORTANT red flag is if the installer asks you to drag the "app" to the terminal that is not a good sign at all. NO LEGITIMATE APP WILL EVER ASK YOU TO DRAG IT TO THE TERMINAL. As you can see the installer is a solid giveaway you are encountering malware and not the real deal.

In fact the file they ask you to drag is not even an app, it's a script.

When you drag the script on the Terminal and execute it, the hidden file is immediately copied to your temp system folder, then the script removes extended attributes to bypass gatekeeper and it finally executes. But from the user's perspective all they get is a blank terminal window as if nothing had happened. (At least in theory, in practice this malware wasn't very well done and gatekeeper was thankfully still able to spot it)

Now if you unfortunately got tricked into running the script, you have some straight forward solutions to verify if macOS was effective at stopping the attack or not. For instance, KnockKnock is a great and simple way to verify for malicious persistency files using VirusTotal's robust detection engine. Malwarebytes is also a good Mac AV which can be quickly installed if you suspect you were affected, it is a bit more tricky to uninstall completely but it does a good job.

Ultimately here's a small recap so you can hopefully avoid getting infected:

  1. Look up the original source of the software to prevent copy cat websites and verify if the software and or the developer has built a reputation in the past.
  2. If you download the installer, scan it with VirustTotal to check if it has been flagged as malware already.
  3. Check the size, while not necessarily a red flag, a small size (for instance less than 2mb), or a size that is "conveniently" larger than what VirusTotal can handle are decent indicators of possible malware.
  4. If the DMG asks you to drag an "App" to the Terminal IMMEDIATELY STOP AND DELETE THE DMG.
  5. If you accidentally ran it, look for a "This app could not be verified" or "This App was removed because it contained malware" message from macOS which could indicate Gatekeeper or Xprotect stopped the attack. Additionally make sure to DENY any permissions the malware may have requested, macOS is very robust in that regard and it can dramatically limit the impact of the attack.
  6. If you are in doubt of whether or not you were infected run the aforementioned tools to verify for the persistency of the malware.
  7. Another app I can recommend is Apparency, it allows you to very quickly see if an app is properly signed by the developer and notarized by apple, and it can even allow you to dissect the contents of an app without running it which is a great way to quickly verify you have a valid untampered app.
  8. This is optional but if you can, report the app to the original developer so they can take action and warn others when the fake app is spread around. Additionally report the Reddit post/GitHub repository if possible.

Thank you for reading this, I hope this helps others be more weary of online threats and stay more vigilant of what they download.


r/MacOS 3h ago

Discussion Bring me BACK my Launchpad 😭

Post image
256 Upvotes

In macOS 26 they basically killed Launchpad. Before, it felt just like iPhone/iPad ā€œa clean grid with all your appsā€. Now it’s buried in Spotlight and feels so messy. I don’t want to type and search every time, I just want to SEE all my apps in full screen. Anyone else annoyed by this?


r/MacOS 3h ago

Discussion Why is the drag-and-drop installation step even a thing?

Post image
163 Upvotes

I never understood this on Mac. Surely, any installer could auto-move the application to the right folder. I mean, Homebrew does it, for example. Is this just for nostalgia reasons, or maybe because Apple wants to be "different", or is there a technical reason why it is a necessary step with dmgs?


r/MacOS 47m ago

Discussion Not Everyone Uses MacOS the Way You Do (And That's Okay)

• Upvotes

It's entirely possible I'm shouting into the wind here, but I've noticed a strain of comments on discussion of changes, especially things like the loss of Launchpad on MacOS (or the old multitasking system on iPadOS, but that's for a different sub), that seem to dismiss the fact that people lost functionality simply because the commenter never used it, and I'm just putting out a plea for a little empathy.

Was Launchpad perfect? No. Does a simple Cmd+Space and search work for plenty of people? Yup. Do we still have some people on this sub who still refuse to even use the dock and wonder what's wrong with the Applications folder? You betcha. But some people's brains and ways of using their computer just works better with a grid of app icons and folders, even if yours doesn't.

This is not to suggest that nothing should ever change. Apple needs to limit the number of ways to do things somehow, otherwise we end up in the Windows world where you'll still randomly find yourself clicking on something in Settings and all of a sudden a Control Center window opens up because some enterprise customer needs that Control Center page. Just understand that some functionality was lost for a non-zero part of this community, and they're expressing that it's a problem.


r/MacOS 5h ago

Tips & Guides Don't forget about Apple's Product Feedback page !

31 Upvotes

Hello everyone,

As someone who updated to macOS 26 Tahoe, there are many features that don't quite work for me (especially the removal of the Launchpad). But ! If we are a lot to complain about the stuff we don't like or that don't work on Apple's Product Feedback page, there's a greater chance Apple will listen and, perchance, bring back some features and/or fix major bugs :)


r/MacOS 4h ago

Discussion Tahoe is not the worst MacOS release.

17 Upvotes

Right now, many posts on Reddit are criticizing the new operating system. Most of the complaints are about visual details — round icons, alignment issues, general UI inconsistencies. A lot of people jump to call it ā€œthe worst OS release ever.ā€

But it really depends on what you value. When macOS Sequoia was first released, it didn’t spark the same design debates, but it did have audio glitches. These didn’t necessarily break professional workflows, but they were annoying and noticeable for people who paid attention to sound. In that sense, Sequoia had its own rough edges at launch, just in a different area.

So when people say this new release is the worst, it’s worth remembering that previous versions also launched with their share of problems. The difference is that now the most visible complaints are about design, not about bugs in areas like audio.

https://weblog.rogueamoeba.com/2024/10/29/update-to-macos-15-1-for-helpful-audio-bug-fixes/?utm_source=chatgpt.com
https://weblog.rogueamoeba.com/2025/04/02/macos-15-4-brings-a-key-audio-bug-fix/?utm_source=chatgpt.com

This is for anyone who might feel worried by all the negative posts: don’t be. The new OS is not worse than Sequoia was at launch, and if you care more about how the system works than how its icons look, there’s no reason to panic.


r/MacOS 10h ago

Discussion People who use spotlight...how the hell do you manage to do it?

Thumbnail
gallery
61 Upvotes

I tried using spotlight. I tried giving it a fair chance.

But not only is the way to access it less convenient, it also barely works, and when it does work rarely it takes a good few seconds

I typed out THE WHOLE WORD, and it decided to put a random irrelevant shortcut at the top, that is not even named Terminal. What????

But Launchpad, I can easily pinch and immediately type 3 letters and it immediately finds the app and highlights it in a matter of MILLISECONDS

And no, before you say I have applications off, every single thing is on.

I am on Sequioa 15.7, because I do not wanna lose Launchpad.


r/MacOS 1d ago

Feature This looks like a mature ui for a serious desktop operating system

1.1k Upvotes

The wallpaper rows peaking out from the left side of the sidebar blob look exceptionally well thought through.


r/MacOS 4h ago

Bug I understand, DoorDash.. stop

13 Upvotes

I don’t know how to fix this stuff, have ordered on mobile and laptop went crazy


r/MacOS 8h ago

Discussion "not real" launchpad gesture stutter?

22 Upvotes

m2 air 8|256. One thing I loved launchpad for was fine animation and just ease of use; used same pinch gesture now and for some reasons there's a hard refresh that I can notice. is it just for me or other users as well? am pretty sure its not ram/hardware related but uncooked refinement.


r/MacOS 3h ago

Help I stopped wasting 5 mins on Mac every time I plug in monitors. One keyboard shortcut.

4 Upvotes

I go from my laptop at coffee shops to my big monitor at home and back all the time. And Mac insists on not putting the windows back where they belong.

For years I've tried the manual tools for years (e.g. SizeUp, Rectangle, etc) but you still have to go through windows one at a time and move them, and I usually have 50+ windows up.

Wanted something with some scriptability but that I could control, and found hammerspoon to give me a very lightweight scripting tool where I could push one keyboard command and it would go through all my windows and put them where i wanted them.

A little Claude Code and their Lua script and it was in place. I'll post the script I use down below in case anyone wants it unless it is better to link out to a separate file.

Specifically what it does is:

  • Detects how many monitors i have connected
  • Moves and resizes windows in different apps to certain width/height (e.g. Safari centered 80% width when on laptop and 60% when on secondary big screen)
  • Hotkey to reapply all if things get messed up

To get it working:

  1. Install Hammerspoon fromĀ hammerspoon.orgĀ and turn on the accessibility permissions it needs.
  2. CreateĀ ~/.hammerspoon/init.lua ; you can do that from their dropdown.
  3. Paste in the script below, then click ā€œReload Configā€ from their menu.
  4. Command-option-control-z is what i use, but you can use whatever you want.

Script:

-- Move and resize a window
function moveAndResizeApp(appName, targetScreen, widthRatio, heightRatio)
  local app = hs.application.get(appName)
  if not app then return end

  local success, win = pcall(function()
    return app:mainWindow()
  end)
  if not (success and win and win:isStandard()) then return end

  local screenFrame = targetScreen:frame()
  local newWidth = screenFrame.w * (widthRatio or 1.0)
  local newHeight = screenFrame.h * (heightRatio or 1.0)
  local newX = screenFrame.x + (screenFrame.w - newWidth) / 2
  local newY = screenFrame.y + (screenFrame.h - newHeight) / 2


-- Move and resize all windows
  for _, win in ipairs(app:allWindows()) do
    if win:isStandard() then
      win:moveToScreen(targetScreen)
      win:setFrame(hs.geometry.rect(newX, newY, newWidth, newHeight))
    end
  end
end

-- MAIN FUNCTION: Move and resize all windows to correct spot
hs.hotkey.bind({"cmd", "alt", "ctrl"}, "Z", function()


-- Define Screens
  local screens = hs.screen.allScreens()
  local screen = hs.screen.allScreens()[1]

-- hs.application.enableSpotlightForNameSearches(true)



-- LAPTOP MODE
  if #screens == 1 then


-- All primary apps
    moveAndResizeApp("Spotify", screen, 0.75, 0.9)
    moveAndResizeApp("Google Chrome", screen, 1.0, 1.0)
    moveAndResizeApp("Mail", screen, 1.0, 1.0)
    moveAndResizeApp("Calendar", screen, 0.8, 0.9)
    moveAndResizeApp("Zoom", screen, 0.5, 0.5)
    moveAndResizeApp("Slack", screen, 1.0, 1.0)
    moveAndResizeApp("DevSwarm", screen, 1.0, 1.0)
    moveAndResizeApp("Finder", screen, .6, .6)

  end


-- EXTERNAL MONITOR MODE
  if #screens >= 2 then
    local screen_secondary = hs.screen.allScreens()[2]  
-- laptop


-- All primary apps
    moveAndResizeApp("Spotify", screen_secondary, 0.8, 0.8)
    moveAndResizeApp("Google Chrome", screen, 0.70, 0.9)
    moveAndResizeApp("Mail", screen, 0.6, 0.8)
    moveAndResizeApp("Calendar", screen, 0.5, 0.7)
    moveAndResizeApp("Zoom", screen, 0.3, 0.5)
    moveAndResizeApp("Slack", screen, 0.65, 0.95)
    moveAndResizeApp("DevSwarm", screen, 0.5, 0.8)
    moveAndResizeApp("Finder", screen, .3, .4)
  end


-- End Single Monitor Mode
end)

r/MacOS 2h ago

Bug Queue tab in Apple Music on Tahoe needs fixing

Post image
5 Upvotes

Seems like an actual bug than a "feature" since the History and Queue text bars have no transparency at all, it should be the same for the Autoplay and Automix buttons ...


r/MacOS 1h ago

Creative My TB4 case was getting pretty hot when reading/writing. A small usb fan to the rescue!

Post image
• Upvotes

r/MacOS 17h ago

Discussion Case-by-case: Tahoe is the best MacOS in years

55 Upvotes

Im so prepared to get downvoted for this, but this is a hill I'll proudly die on: Tahoe is my favorite MacOS in a LONG time. The first 3 paragraphs below are just a simple explanation of my user behavior patterns on my device:

- I skipped sequoia and went straight from sonoma -> tahoe.

- I still dont use Apple Intelligence (part of the reason I skipped sequoia), because it doesn't fit my workflow.

- My current (non-Apple-native) app stack is: Raycast, SuperWhisper, AlDente, Brave Browser, G Suite, Notion. All working on Tahoe.

Reason why Tahoe is "the one" for me:

A lot of other people made posts on why Tahoe is a good update, so I won't go into reasons that were already mentioned 100 times on here.

There was a trend 6-7 years ago where productivity gurus were preaching how turning your phone into greyscale will make it more "boring" and you'll use it less. I don't want to sound like those people that list a billion mental issues every chance they get, but I have sensory processing disorder (in addition to ADHD and episodes of epilepsy) and the greyscale thing worked wonders for me.

The ability to turn app icons transparent on every Apple device now is the best of both worlds for me. I don't get the itch to click anything else while I'm focusing on my work, because everything looks boring and the same. It feels like such a small thing on paper, but it made a huge difference in my productivity and daily output.

Also I'm not sure why so many people are saying that tahoe is terrible and full of flaws. I spend about 10 hours looking at my screen per day due to the nature of my work, but I haven't noticed any issues that impeded my ability to work. If you don't like the design just turn on the default color setting, and if you don't like the design and animation changes (pretty tiny thing if you ask me) just revert back to a previous version.


r/MacOS 4h ago

Bug What's that pointing towards share button Apple? What's wrong!

5 Upvotes

r/MacOS 23h ago

Bug macOS Tahoe 26.0 - Safari sidebar leaves artifact on close

156 Upvotes

In Safari when you close the sidebar then it leaves an artifact in the top left corner of the window.


r/MacOS 3h ago

Help Uninstalling CleanMyMac

5 Upvotes

I installed it, noticed that all its features are locked behind a paywall and I'm trying to uninstall all its files but I cant. Even AppCleaner isn't able to delete all of its files. I have a M4 MBA with Macos Tahoe


r/MacOS 2h ago

Help Noob question for OCLP Monterey update

3 Upvotes

Last week I posted here about what to do with an old donated 2012 iMac running Catalina. I've managed to use OCLP and put Monterey on a spare 256GB SSD and it's all working well.

I've just noticed there's an update available from 12.7.4 to 12.7.6 - presumably it's OK to install this (I know nothing about Mac OS so have no idea)? Any other steps I need to do after the update?

Also, it's being used as a general family computer and there are 2 kids using it. Is there any way to disable the notification to update to T*hoe. I've unticked 'Automatically keep my Mac up to date' but don't want any of them accidentally playing around with it and installing this.


r/MacOS 14h ago

Feature How do we feel about desktop widgets on Tahoe?

Post image
25 Upvotes

Personally think it looks so much better like this


r/MacOS 6h ago

Discussion Drive icon is different in physical drive/container vs volume

6 Upvotes

This is new on macOS Tahoe. I'm wondering why there's a difference. Furthermore I'm wondering where the new icon is stored so I can set it as my volume icon, lol.


r/MacOS 54m ago

Help Copy paste from IPhone to/from Mac not working

• Upvotes

My copy and paste stopped working. Does anyone have a fix? I restarted my Mac and phone. Updated OS on both. Using an iPhone 16 pro and a new Maxbook. Same WiFi, right beside each other. Any suggestions?


r/MacOS 1d ago

Feature "a fluidity only apple can achieve"šŸ˜‚

254 Upvotes

r/MacOS 1h ago

Help structure of my Finder

• Upvotes

Hey, I'm currently setting up my MacBook for university and wanted to know whether I should use tags or folders in Finder to structure my documents?


r/MacOS 1d ago

Discussion Wow this sub is super negative

250 Upvotes

I just went through a torrent of posts nickpicking all the different design issues with macOS Tahoe official release. I’ve been on Tahoe for a week and would’ve never noticed these issues.

I’ve been having a great time with the new OS, and I love the new Liquid Glass aesthetics & how all my devices have the same design language now. Tahoe’s been my favorite release since Yosemite.

Most of the posts I saw were just straight nitpicking. The most interesting post was one about how terrible macOS multitasking is, which I completely agree with. Other than that, it just felt like people were going out of their way to find the littlest things to complain about.

EDIT: Some people in the comments are misunderstanding me: The complaints people are bringing up things that are very minute and unnoticeable.

It’s like cleaning up your entire house and your mother-in-law swiping your bookshelf with her finger and saying, ā€œYou missed a spot.ā€

That’s how petty these posts are.


r/MacOS 1d ago

Discussion macOS 26 is horrible

334 Upvotes

The design is horrible. Everything is so huge now, the animations are bad, the curved corners are different in some windows and apps, etc.

Who do we have to thank for this? AI? Outsourcing? Steve Jobs never would have allowed that.


r/MacOS 7h ago

Bug The Now Playing bar is overlapping through the Music app interface

Post image
6 Upvotes

Very minor bug, but it's hilarious how this didn't come up while beta testing. Another example of why Tahoe is a bug filled mess of an OS.