Someone created a fake version of my app that copies the name, icon, and even re-uploaded my demo video on YouTube. Some users installed it believing it was legitimate. The fake .dmg instructs users to drag files into Terminal something my real app never does. Jamf has already published an analysis of this malware variant, which includes a fake “DynamicLake.dmg” as one of the distribution vectors. Several users contacted me after installing it, but as a solo developer I don’t have the tools to help remove malware I didn’t create. Google/YouTube abuse reports haven’t resulted in takedowns so far. I’d appreciate advice from anyone who has dealt with malicious clones or knows effective ways to handle abuse reports and protect users. More details and verification tips in the first comment