Question 1

Что такое вредоносное ПО Reaper для macOS?

Accepted Answer

Reaper is an updated variant of SHub Stealer that uses Apple's Script Editor to execute hidden malicious code. It targets cryptocurrency wallets, browser credentials, and personal documents on macOS systems. The malware hides its payload below the visible scroll area in Script Editor using whitespace padding and ASCII art.

Question 2

Какие криптокошельки атакует Reaper?

Accepted Answer

Reaper targets Ledger Live, Trezor Suite, and Exodus desktop applications, along with browser extensions like MetaMask and 1Password. It modifies the wallet apps' internal code to intercept and divert future transactions. The malware also collects saved credentials from Chrome, Firefox, and Edge.

Question 3

Как Reaper обходит защиту терминала Apple macOS?

Accepted Answer

Apple's macOS 26.4 update blocked suspicious paste operations in Terminal. Reaper avoids Terminal entirely by using an `applescript://` URL to open the native Script Editor app. The malicious payload is hidden below the visible scroll area using whitespace padding. Victims execute the code by clicking the play button inside Script Editor.

1Пароль

Вредоносное ПО Reaper захватывает Script Editor для опустошения криптокошельков на macOS

Один четкий краткий обзор.
Каждый день.

1Пароль

Вредоносное ПО Reaper захватывает Script Editor для опустошения криптокошельков на macOS

Один четкий краткий обзор.Каждый день.

Один четкий краткий обзор.
Каждый день.