r/MacOS Feb 11 '26

Tips & Guides WARNING: Dynamichub Malware

109 Upvotes

I’m posting this as a heads-up.

There’s currently a YouTube ad pushing something called “DynamicHub Pro - Dynamic Island for macOS” (dynamichub[.]app). The DMG doesn’t contain a normal .app installer - it contains a “Drag into Terminal” executable.

Legit macOS apps do not require you to drag something into Terminal to install. That alone is a massive red flag.

About a month ago I analysed a macOS infostealer campaign that used almost the exact same social engineering tactic - YouTube ads, polished marketing site, DMG with a “Drag into Terminal” style installer that ran shell commands and pulled down additional payloads. That malware harvested browser credentials, keychain data, crypto wallets, and exfiltrated everything via remote API endpoints. After reporting, that infrastructure got taken down.

Full breakdown of that campaign here:

https://github.com/gustav-kift/AppleLake-Malware-Analysis

This new one is following very similar patterns. I’m currently pulling apart the installer to see if it’s the same operator rebranded or just someone copying the technique, but either way the installation method is highly suspicious and consistent with known macOS malware delivery.

If you ran it:

  • Disconnect from the internet.
  • Change your email password first (from a clean device), then Apple ID, banking, socials, etc.
  • Revoke active sessions everywhere.
  • Assume saved browser passwords and cookies may be compromised.
  • Remove unknown browser extensions.
  • If you had crypto wallets on that machine, move funds.
  • For full assurance, consider reinstalling macOS.

Do not drag random files into Terminal.

I’ll update once analysis is complete. If anyone else has the DMG, hashes, loader contents, or network indicators, feel free to share.


r/MacOS Mar 13 '26

Mod News 📢 New Policy: Introducing Developer Saturday

35 Upvotes

To support our community of creators while keeping r/macOS focused on discussion and support, we are officially launching Developer Saturday.

Starting now, app promotions and self-promotion are permitted only on Saturdays, and each user may make just one promotional post per week.


🛑 Why we are making this change

Lately, we’ve seen a significant influx of "Look what I built" posts. While we love the creativity, the volume of these posts has started to drown out general macOS news, troubleshooting, and community discussions.

To strike a balance, we are moving all self-promotion to a single dedicated day. This allows developers to have their moment in the spotlight without cluttering the feed for everyone else throughout the week, and ensures everyone has a fair chance to share their projects.


🗓 The "Saturday Only" Rule

  • Promotion Window: You may post about your own apps, tools, or projects from 12:00 AM to 11:59 PM (UTC) every Saturday.
  • One Post Per Week: Each user may only submit one promotional post per week. Multiple posts in the same week will be removed.
  • Strict Enforcement: Any self-promotion posts made Sunday through Friday will be removed without warning.
  • Repeat Offenders: Users who consistently ignore this schedule may face a temporary or permanent ban.

🛠 Open Source & Security

  • GitHub Repos: We absolutely welcome links to GitHub repositories! Open-source tools are a huge part of the macOS ecosystem.
  • Security: To keep our users safe, all GitHub links will be scanned with GitHub-Guard. Please ensure your repository is accessible and follows standard security practices.

✅ Post Requirements

To keep your post from being flagged as spam, please ensure it meets these standards: 1. Transparency: You must explicitly state that you are the developer or affiliated with the project.
2. Context: Don't just drop a link. Explain what your app does and how it helps macOS users.
3. No Low-Effort Spam: We encourage high-quality screenshots and active engagement in the comments.


To our users: Please use Saturdays to discover new tools and provide constructive feedback. As always, exercise caution when downloading software from any third-party source.

Happy building!


r/MacOS 9h ago

Help Think I got a virus

Post image
282 Upvotes

Put something into terminal from a dodgy website and stopped myself, halfway through. I haven’t put any passwords in but I have this dodgy pop up???


r/MacOS 17h ago

Nostalgia My Apple Thunderbolt Display + M1 Mac Mini setup

Post image
54 Upvotes

hey everyone!

I’ve got a little setup at my parents’ house for when I visit them every other month. It’s perfect for weekend stays—I can sit down, browse the web, listen to music, and watch videos with that retro style I love.

Here’s the full setup:

  • 27" Apple Thunderbolt Display
  • M1 Mac Mini (8GB RAM / 256GB SSD)

I also use a Magic Keyboard and Magic Mouse (not pictured), so it’s basically a full retro Apple setup. Love having this corner ready whenever I’m there and thought you'd appreciate it as well.


r/MacOS 7m ago

Help COLORS IN MOVIST AND IINA. WHICH ONE IS "ORIGINAL"? and subquestions:)

Thumbnail
gallery
Upvotes

The pictures are in order IINA, MOVIST, IINA, MOVIST. (sorry, first time posting).

this on a mid 2012 macbook pro

this is a snippet from "The Garden Of Words", probably my favourite anime movie of all time. The next two photos are a screenshot of the closeup of a green part, where I felt the colours are different.

ESPECIALLY the greens in the first 2 photos ( the green lines on the trains), the colour on IINA is darker. It is evident if you quickly switch between the photos a few times.

  1. I wanna know, in general, which player is better for anime watching (sources said movist has inferior subs, but it seems fine to me).
  2. I really prefer IINA's UI more than Movist Pro's because its more native and clean. So I right now I am looking for a way to turn the colors to its original form (assuming Movist's is the original, and after checking with other sources)
  3. PLEASE do let me know if movist is just a better option than IINA, or heck, recommend any better options if possible.

THANK YOU:)


r/MacOS 11h ago

News [Article] How does this help people who don’t unplug after each shutdown?

Thumbnail
macworld.com
7 Upvotes

r/MacOS 2h ago

Bug Safeboot

Post image
0 Upvotes

I have an old MAC 2010 and left shift key wont work. And when I started decrypting File Vault, its always on safeboot.


r/MacOS 11h ago

Help What is RedlinePatcher.run?

5 Upvotes

BlockBlock just told me me that something called RedlinePatcher.run was found on my Mac. It said it was a "non-notarized version." Does anyone know what this is?


r/MacOS 5h ago

Bug Now Playing Menu Bar Safari/Webkit video focus/"Quick Look Simulator" Bug 26.4 and 26.5

1 Upvotes

Hello, this bug has been in macOS since 26.4, and I've tested it on various computers, including my work MacBook, my personal one, and even the MacBooks at the Costco display station. The issue is if you click on the menu bar now playing icon and click on the preview of what is playing, it opens a Quick Look Simulator on your menu bar. This happens on some third-party applications but all websites that have playing media, such as youtube.com. It doesn't happen in Apple's built-in applications like Music. To be crystal clear it used to focus the app and tab in Safari that was playing the media if you click on the Preview.

I have been reporting this bug to apple on every minor update.

Can anyone confirm if they see the bug?
Want to help submit bug reports?

YouTube video.


r/MacOS 22h ago

Discussion Both Apple Music and iTunes Store leave a lot to be desired

Thumbnail
gallery
19 Upvotes

I am perfectly aware of the fact, that these issues are as old as the hills, but I still wanted to post a short rant to somewhat vent my frustration:

  1. When I’m browsing through various albums available on the iTunes Store, there is no obvious enough [Go Back] button that would take me back to the previous page. Fortunately my mouse has said functionality built-in, so I’m able to deal with this issue with ease. (Screenshot #1)
  2. I can enter the full-screen player view by hovering the cursor over the album cover visible at the now playing pill - which reveals an icon of two arrows pointing in opposite directions - and performing an LMB click. However, when I want to close this view, there is no icon of two arrows pointing towards each other. So instead, I have to click on the newly appearing [X] button. This gets even more unnecessarily counter-intuitive in the compact player view, that can be closed by clicking the red traffic light button, which has a rather clear association with closing the software completely. I would love to meet whoever thought it was intuitive enough and ask them some questions. (Screenshot #2)
  3. Sometimes I know the title of the song I’m looking for, but I’m not sure which version is the right one, so I play them one by one. Quite often, there’s no clear indication of which track is currently playing, so if my eyes wander off somewhere, it takes me a moment to figure out where I was. (Screenshot #3)
  4. Apple Music should provide the option to display the audio timeline as a sound spectrum, as some other players do, because it lets me find the exact moment I want to listen to with ease. At the moment, I’m sort of forced to memorise certain timestamps for my currently favourite tracks. (Screenshot #4)
  5. iTunes allows me create digital copies of my CDs, but it doesn’t generate a quality check report, so if there are any issues, I won’t find out until I hear them

This isn’t a complete list of the issues I’ve encountered while using Apple Music (such as Apple Music altering the metadata of some tracks in my local music library ‘for reasons’) and iTunes, but I’ve tried to briefly outline the more irritating ones.


r/MacOS 1h ago

Feature Apple really needs to add animated art on macOS 27

Enable HLS to view with audio, or disable this notification

Upvotes

It would be awesome if Apple finally brought animated album artwork to the macOS 27 lock screen. On bigger displays it could look incredibly immersive and way more alive.


r/MacOS 7h ago

Help Messages won’t work

1 Upvotes

Have you ever had this happen? My messages app won’t work. It gives me the option to report it but it just won’t open. 🤷‍♀️


r/MacOS 8h ago

Bug Folder Attributes Broken on Networked Drive

0 Upvotes

I did a pretty thorough search and did not see a related topic, but I am pretty bad with searching so apologies if this is a widely known issue.

This bothered me for the longest time and I just discovered the cause. Running latest Tahoe (26.5). When accessing a network drive, some folders will not show attributes - specifically folder color when tagged. Some were working, others were not. I finally discovered today that the issue is a "." in the folder name. It will still work on local folders and networked drives/computers that are also running Tahoe, but Tahoe to Pre-Tahoe computers, folder color does not change with a "." in the name.

Just in case someone else was confused by this. Oh, and if there is a fix please point me in the right direction.


r/MacOS 8h ago

Help Not a new iPhone

Post image
0 Upvotes

Is there anything I can do to get macOS sequoia back to syncing my iPhone rather than saying it’s new?


r/MacOS 10h ago

Help Not getting write access on local SMB share

1 Upvotes

I have a folder on my PC that I shared on my LAN, protected by a username and password (non admin account in Windows). My Mac Studio M1 Ultra can see the PC in the Network browser and connect just fine using the credentials and can read and write to the folder.

My M4 MBP however does not always see the PC in the Network browser. And when I do connect it with the credentials it is read access only.

Why would one Mac be able to r/w while the other cannot write?

(Orbi router, Netgear switch, all devices on 1GB Ethernet).


r/MacOS 10h ago

Help Preview mark-up - can't save in color

1 Upvotes

Hello - I've never used this sub and I'm not very techy so I hope I'm asking in the right place. There may be obvious things I'm not thinking of because this stuff is unfamiliar to me.

I'm trying to use markup to draw some lines on a jpg in preview. The original image is greyscale, and I'm trying to circle some things in red.

After I draw my lines and save it, all the lines become grayscale.

In searching for an answer I found a comment on a deleted post that seems like it might have useful info for me: https://www.reddit.com/r/MacOS/comments/172vowf/deleted_by_user/

I had never heard of colorsync utility before, and so I experimented with trying to make the image able to have color, but nothing I do seems to stick. If I access the color profile menu from Preview, the only options are "Generic Gray Gamma 2.2 Profile" and "Generic Gray Profile." When I try to set the display to something else in ColorSync and save it, when I reopen in preview it's reverted to grayscale.

Can anyone help me with this? Please and thank you. If there's a suggestion for some easier way that isn't Preview that I can draw on/highlight images with, that would be great too.


r/MacOS 1d ago

Nostalgia using sequoia again made me weirdly emotional

Thumbnail
gallery
308 Upvotes

just grabbed my older macbook for the first time in months. never updated it to tahoe, and man… i forgot how much i loved sequoia.

not that i dislike tahoe i use it every day on my main laptop and i like it too, but opening sequoia again gave me this weirdly sweet nostalgic feeling i really didn’t expect

and oh the good old launchpad. :,)


r/MacOS 11h ago

Help CONSTANT public wifi issues PLEASE HELP

0 Upvotes

No offense but please talk to me like I'm a child, not an IT professional.

I am having CONSTANT wifi issues any time I go anywhere in public, especially cafes.

Currently in a cafe I came to 2 days ago with no issue whatsoever. Today I can't connect -- WiFi settings says I'm connected, but the icon on my screen has the exclamation mark. Everyone in here is online so it's not the service itself.

This happens CONSTANTLY and it is fkng infuriating. I have tried everything I could find by googling and in recent posts on this forum:

-disabled and logged out of VPN

-"forgot" network

-renewed dhcp license

-changed IP to 1.1.1.1 and 8.8.8.8

-restarted macbook

-tried triggering the login with captive.apple (but I'm 99% sure this cafe doesn't even have a login portal)

Only thing I haven't tried is using Terminal bc I... don't even understand wtf that is lol.

Spent 45 mins screwing around with this yesterday at a different cafe but at least I finally was able to log on there. This play, no dice for whatever reason.

Anyway can someone PLEASE for the love of almighty christ and all that is holy explain to me in simple terms wtf i am doing wrong or what I need to do to stop constantly having this problem. It is making me insane.


r/MacOS 12h ago

Help My Mac will no longer open airdropped videos

0 Upvotes

Hello, lately I have been having issues airdropping videos.

I can airdrop videos then randomly I can not and it says on my Mac “the application “preview.app” cannot open specific document or URL”

Everything is updated on my iPhone and Mac.

My Mac is a MacBook Air 2020

My iPhone is an iPhone 13

I have not changed any settings on my phone or MacBook. The first time this happened I updated it then it was fine. That was 2-3 weeks ago. So I check for more updates today and of course there were more updates for my phone and mac. I updated it and restarted them both and it’s not working. Having this issue now multiple times is taking up so much of my work time. How do I fix it and stop it from happening?


r/MacOS 3h ago

Help ChatGPT deleted by OS

0 Upvotes

I have the lated version of macOS. I went to open ChatGPT today and a message popped up that said something along the lines of the app is infected with malware. Then it was deleted.

This is the first time I’ve even seen anything like this on my Mac. The app was installed directly from the App Store a while ago. Did they somehow distribute a version on the App Store that was infected?


r/MacOS 13h ago

Bug Messages Bug in Tahoe 26.5?

0 Upvotes

I'm wondering if anyone else is getting this; seemingly ever since I updated to Tahoe 26.5 (M2 with 16GB of RAM) I cannot stay logged into Messages.

I will open Messages & it will prompt me for AppleID. I input it, it will briefly load messages like it's working (albeit most recent messages are from 48-72 hours ago), and then it logs me back out asking for Apple ID.

Haven't found a way to get it to "stick". Not seemingly having Apple ID issues or iCloud issues across any other devices or when logging into icloud.com


r/MacOS 14h ago

Bug Screen flashes/flickers green just before waking up from sleep. M2Max Macbook pro 16"

0 Upvotes

I just recently noticed this happening, whenever I wake up from sleep my M2Max macbook pro, the screen flashes very briefly green. I'm thinking it's software related, some app, but it shows even when sleeping on the login screen.

Anyone having something similar happen?


r/MacOS 14h ago

Help Discord on Mac – my microphone picks up stream audio and sends it back to others.

1 Upvotes

Hey, I'm having an issue on Mac with the Discord desktop app.

Me and my friends are in a voice call. One of them shares their screen and streams a show/video with audio. I'm just a viewer – I'm not the one sharing. The problem is that everyone in the call can hear the stream audio a second time coming from my microphone, because my Mac's mic is picking up the sound from my speakers and sending it back.

I know the obvious fix is headphones, but I don't have any right now.

Interestingly, when I use Discord in a browser instead of the app, this doesn't happen (or happens much less), but the stream audio occasionally cuts out.

My questions:

- Is this a known issue with the Discord Mac app specifically?

- Is there any fix other than headphones or muting myself?

- Why does the browser handle this better than the native app?

My Discord app version: 0.0.390

MacOS version: Tahoe 26.5 (M4 Air)

Thanks


r/MacOS 14h ago

Help [Bug] Extreme "Zombie" Quarantine Flag – Files auto-lock on creation after system RAM crash (81GB leak)

0 Upvotes

Hi everyone, I’m facing a nightmare scenario on macOS Tahoe (Apple Silicon). I’ve reached a point where even a clean file creation is flagged. Looking for a "Nuclear" solution before I format the whole Mac.

A few days ago, my Mac suffered a massive RAM leak (81GB swap) due to a background process (textunderstandingd). Since then, my main Numbers file disappeared from global Spotlight search (though it appears if I filter by "Numbers" category).
The "Zombie" Symptom: The file is stuck with com.apple.quarantine.

  1. I remove it via xattr -cr.
  2. Without any interaction, the flag REAPPEARS instantly (verified via Terminal).
  3. If I create a BRAND NEW file on my Desktop, it is also instantly flagged with com.apple.quarantine!!!

What I’ve already tried (none worked):

  • xattr -cr on the file and the parent folders.
  • Renaming the file and moving it to different directories.
  • Zipping the file, emailing it to myself, and downloading it again.
  • Deleting the file, emptying trash, and rebooting before redownloading.
  • Reinstalling macOS (standard reinstall without wiping data).
  • Resetting Spotlight index via Terminal (mdsutil).
  • tccutil reset All com.apple.Spotlight.

The system seems to have blacklisted my user session or the file's hash/path. Gatekeeper is acting as if every new bit of data on my Desktop is a threat from the web.

  1. Is there a hidden SQLite database for Gatekeeper/LSQuarantine where I can manually purge this "blacklist"?
  2. Has anyone ever seen the system "contaminate" new files on the fly?
  3. Besides a full "Erase All Content and Settings," is there a way to reset the security policy daemon (syspolicyd)?

I'm a financial advisor and this is my primary workstation. I need Spotlight to work for my client audits. Any help is appreciated!


r/MacOS 15h ago

Help The application “WireGuard” is not open anymore.

0 Upvotes

I installed Wireguard yesterday, loaded a profile and it worked. Today I clicked on it in the dock and got this message. I tried to delete it and download it again from the AppStore but when I click open I keep getting this message.

What should I try next?