Maccy users have been alerted to counterfeit websites following the discovery by researchers of malware exploiting the app’s name to capture Mac login credentials.