Malwarebytes
Malwarebytes scans your Mac for harmful software and can block threats and dangerous websites. It’s made by Malwarebytes, based in the United States.
Criminals have used its name in fake downloads or scams, so get it only from malwarebytes.com.
What it is
People use Malwarebytes to find and remove malware, adware and unwanted apps. The free version cleans up existing infections. Paid plans add ongoing protection and blocking of harmful websites.
It needs Full Disk Access to scan protected parts of your Mac. Its web protection uses a system extension and permission to filter network content. These permissions support its security features.
Malwarebytes collects information about your device, app use and detected threats. Mac users can turn off usage and threat statistics in its settings. Download it from the official website, as criminals have distributed fake copies.
Who makes it
Malwarebytes is a cybersecurity company founded in 2008 and based in Santa Clara, California. Its legal name is Malwarebytes Inc.. Its website is malwarebytes.com.
Is it the real one?
Every Mac app carries a signature from the developer who made it. Apple checks who the developer is before handing out the certificate, and macOS refuses to open an app whose signature has been tampered with.
HARD hasn’t yet recorded the signature on a real copy of Malwarebytes. Its Mac app shows who signed the copy you have.
Its bundle ID, the name macOS knows it by, is com.malwarebytes.mbam.frontend.application or com.malwarebytes.mbam.frontend.agent. Download it only from malwarebytes.com, not from an ad or a link someone sends you.
Fakes. In September 2025, criminals promoted fake Malwarebytes for Mac downloads through GitHub pages. The installation instructions asked users to run Terminal commands that installed Atomic Stealer, which steals personal information.
What it connects to
In normal use, Malwarebytes talks to these places on the internet. A firewall that asks before apps connect, like the one in HARD’s Mac app, will show them.
| Address | Why |
|---|---|
www.malwarebytes.com | Check server connectivity. |
cdn.mwbsys.com | Download updates. |
sirius.mwbsys.com | Check app and protection database updates. |
keystone.mwbsys.com | Validate subscriptions. |
my-device.malwarebytes.com | Register the installation with your account. |
telemetry.malwarebytes.com | Send telemetry and threat information. |
iris.mwbsys.com | Show reports, notices and offers. |
hubble.mb-cosmos.com | Check threats and reduce false detections. |
What it can see
macOS asks you before an app can use these. You can change them any time in System Settings → Privacy & Security.
| Permission | What it’s for |
|---|---|
| Full Disk Access | Scan protected system areas and enable ongoing malware protection. |
| Endpoint Security Extensions | Enable its security extension for web protection; macOS also asks permission to filter network content. |
Security record
Problems with Malwarebytes or Malwarebytes in the last three years, newest first. Keeping the app up to date covers the ones that were fixed.
| When | What happened | Source |
|---|---|---|
| CVE-2023-43688 disclosed a memory flaw in Malwarebytes 4.x/5.x and Nebula that could disrupt operation; the record does not identify affected operating systems or a fix. | ↗ | |
| ZDI disclosed a flaw allowing a local attacker to gain SYSTEM access through the Malwarebytes Anti-Malware service, fixed in version 1.0.6.31; the advisory does not name the affected operating system. | ↗ | |
| The maker's separate Windows Firewall Control installer had a flaw allowing a local attacker to gain higher privileges, fixed in version 6.16.0.0. | ↗ | |
| A Windows Malwarebytes service flaw let a local attacker delete files and gain higher privileges; Malwarebytes issued an update to fix it. | ↗ |
References
- Malwarebytes for Mac malwarebytes.com
- Fleet software catalogue: Malwarebytes for Mac fleetdm.com
- PatchBee: Malwarebytes for Mac deployment and bundle identifier patchbee.io
- About Malwarebytes malwarebytes.com
- Malwarebytes announces acquisition of Cyrus malwarebytes.com
- Malwarebytes Website Terms of Service malwarebytes.com
- Allow Full Disk Access on macOS help.malwarebytes.com
- Turn on Web Protection in Malwarebytes for Windows and Mac help.malwarebytes.com
- Malwarebytes Privacy Policy malwarebytes.com
- Update to the latest Malwarebytes version for Mac help.malwarebytes.com
- Malwarebytes for Mac version 5.28.4 help.malwarebytes.com
- Allow Malwarebytes through your firewall help.malwarebytes.com
- Fake Malwarebytes, LastPass, and others on GitHub serve malware malwarebytes.com
- CVE Program record: CVE-2023-43688 raw.githubusercontent.com
- ZDI-26-267: Malwarebytes service privilege escalation zerodayinitiative.com
- Windows Firewall Control changelog binisoft.org
- ZDI-24-1195: Malwarebytes file deletion and privilege escalation zerodayinitiative.com
- Windows plays Jenga: Uncovering Design Weaknesses in Windows File System Security insuyun.github.io