Security researchers warn of a new Google malware scam that could infect Macs

So-called 'malvertising' is the exact reason why Apple wants you to use its App Store.

Credit: Dreamstime

If there's one thing that computer users can always count on, it's that hackers will always try to find ways to intrude upon your devices. And according to a report by security specialists Spamhaus and (via Ars Technica), hackers have become more aggressive with attempts to spread malware through Google searches for Mac software.

Essentially, hackers are running ads that appear when using Google to search for software. The Google ads appear at the top of the search results and seem to provide what the user is looking for.

Then the user clicks the ad and goes to a spoofed software download page, and when the user clicks to download, malware is saved to the computer. The most common malware is known as XLoader, which is available for both Windows and macOS. XLoader has previously been used to record keystrokes and steal personal data on infected machines.

Spamhaus has seen an increase in malvertisting over the past few weeks with several popular apps such as Mozilla Thunderbird and Microsoft Teams. In the report, states that there is a great deal of demand for the nefarious ads, so they will likely become even more commonplace.

In its own investigation using a Mac, Ars Technica easily found malvertising in simple Google searches for common software downloads such as visual studio download and Tor download.

Google is aware of the practice and is working to fix the issue. However, it is still extremely widespread as noted by a statement sent to Ars Technica: We are aware of the recent uptick in fraudulent ad activity. Addressing it is a critical priority and we are working to resolve these incidents as quickly as possible.

How to avoid malware

Even if Google fixes the problem in the immediate future, hackers will find a new way to spread malware to your Mac. That means it's up to users to protect themselves.

The safest way to get Mac software is through Apple's App Store, it's what the company says is why the App Store exists in the first place. The truth is it's all about the money, but the two things can both be true.

Apple verifies that each app in its store is safe to download. Most of the popular apps from large software developers are available, and there's a great selection from indy devs, too.

If the app you need isn't in the App Store (or you want developers to get as much of the paid fee as possible and don't want Apple to get its cut), then you have to turn to the internet. Your best option when downloading software is to go directly to the developer's website. They should offer secure methods to acquire the software you need.

Try to avoid websites that specialise in software downloads as much as possible because hackers constantly target these sites. If you have no alternatives, you can use a site such as VirusTotal to check files and URLs for malware.

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags malwareGoogleApple

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.
Roman Loyola

Roman Loyola
Show Comments

Most Popular Reviews

Latest News Articles


PCW Evaluation Team

Cate Bacon

Aruba Instant On AP11D

The strength of the Aruba Instant On AP11D is that the design and feature set support the modern, flexible, and mobile way of working.

Dr Prabigya Shiwakoti

Aruba Instant On AP11D

Aruba backs the AP11D up with a two-year warranty and 24/7 phone support.

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers


This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang


It really doesn’t get more “gaming laptop” than this.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?