iCollections 9.7.2 para macOS · Exploitation confirmed

Fake iCollections site for macOS offers DMG flagged as malware

Nov 03, 2026 · 1 min read

A site hosted at icollections.github.io poses as the iCollections 9.7.2 page for macOS and delivers the file iCollections_9.7.2.dmg, flagged as a malware sample by MalwareHunterTeam. Downloading and running the installer can infect the Mac. Get the app only from the official source and distrust installers from unknown sites.

By HIFY Radar newsroom Updated 11/03/2026 04:57 PM Get this every day →← Back to the feed 1 source

HighSupply chainExploitation confirmedFix unconfirmed

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A site hosted at icollections.github.io mimics the iCollections 9.7.2 page for macOS. The 'Start download' button delivers the file iCollections_9.7.2.dmg, flagged as malware by MalwareHunterTeam.

Why it matters

Anyone who downloads and runs the installer can infect their own Mac. A compromised machine can expose corporate data and serve as an entry point for further attacks.

What to do

Download iCollections only from the official source, never from icollections.github.io. Block the domain icollections.github.io and the file iCollections_9.7.2.dmg. Check Macs that may have installed this file.

For the technical team

Affected: iCollections 9.7.2 para macOS; instalador DMG distribuído por site hospedado em icollections.github.io · Users who download the file iCollections_9.7.2.dmg offered by the site icollections.github.io. No legitimate product or version is cited as affected.
Exploitation: Flagged as a malware sample by the MalwareHunterTeam account. The sources report no victims or ongoing campaign.
Fix: No fix mentioned. Mitigation: do not download the file, get the app only from the official source, and block the domain.
Vector: Malware distribution via fake site. The page at icollections.github.io presents itself as the iCollections 9.7.2 site for macOS; the 'Start download' button serves the file iCollections_9.7.2.dmg hosted on the same domain. Infection requires the user to download and run the installer.
More details: Finding shared by the MalwareHunterTeam account on X, with links to the site and the file. The fake page title is 'iCollections 9.7.2 for macOs'.