Malwarebytes for Mac

Malwarebytes for Mac scans for malware, adware and potentially unwanted software and lets you review detections, quarantine items and inspect reports. It is intended for home users and technicians checking a Mac, with paid plans for ongoing protection.

Scanning and protection

• Run manual scans and review detection history and reports.
• Quarantine detected items and manage an Allow list for reviewed exceptions.
• Use paid real-time malware and app protection, scheduled scans and Web protection.
• Check Trusted Advisor recommendations and access controls through the Mac status menu.
• Use plan-dependent VPN or identity services when offered and activated.

The official scan guide says Mac scans focus on likely threat locations; a fast scan is not proof that every file on a disk was checked. Browser Guard is a separate browser extension, not an assumed component of this Mac package. Features differ by platform, subscription and rollout; Windows-only features must not be inferred for Mac.

Installation and compatibility

Download the official PKG and follow its installer, or use brew install --cask malwarebytes. Accept the software license and authenticate installation with your Mac username and password. The exact 5.28.3.4239 PKG is 122,433,234 bytes, verified by HEAD against the official version-specific URL. Installed components, updates, databases, logs and quarantined files need additional storage.

The October 2026 official 5.28 release announcement drops macOS Big Sur 11 application updates; existing Big Sur users continue receiving protection database updates. For the current 5.28 line, use macOS Monterey 12 or a later supported macOS version. The broader system-requirements article still lists Big Sur, so its older listing should not override that release-specific change. The Mac requirements article explicitly lists no minimum RAM or free-disk-space requirement; this does not mean the app consumes none. The checked current sources do not specify a Mac CPU clock minimum or establish the exact installer architectures. No development toolchain is required by the installation guide.

License, accounts and network

Malwarebytes is proprietary software with a free manual-scanning option and paid subscriptions. The installation guide permits choosing Maybe later and Continue without email; a newsletter signup is not required to reach the free dashboard. Paid protection requires activation of the applicable subscription. Real-time and Web protection and scheduled scanning are paid features. Trial or plan availability may vary.

Internet access is required for installation, activation, software updates and protection database updates. VPN and account-based identity services require their own connected services. The 5.28 announcement describes a gradual rollout of 10 GB of VPN traffic every 30 days for Free and Standard users; do not assume every installation has received it or that it provides unlimited data.

Permissions and privacy

Full Disk Access enables thorough scans and the Mac real-time malware/App block layers to inspect sensitive system areas. Without it, protection can be limited or inactive. Web protection also asks for system-extension approval. Grant only permissions requested by the official installer and review their purpose in System Settings; Screen Recording or Accessibility is not established as a routine prerequisite in these sources.

The privacy policy describes usage and threat statistics, including detection samples and statistics. On Mac, it documents an option in Settings to disable Help fight malware by providing usage and threat statistics. Review current settings and the full policy before submitting diagnostic reports or sensitive samples; do not assume all security processing is offline or that opting out removes every operational network request.

Safety and version evidence

Inspect detections before removal, keep backups and review false positives before creating exclusions. Excluding a file or disabling protection can reduce coverage. Security software cannot guarantee that a Mac is clean or replace prompt OS updates and safe downloads; investigate symptoms that persist after a scan.

The catalog currently records 5.28.3.4239, 5.27.1.4191 and 5.27.0.4189. Official public notes were found for the 5.28 series and 5.27.1 release, but not exact build-specific 5.28.3.4239 or 5.27.0.4189 changes. The 5.27.1 article does not separately identify build 4191. These are explicit documentation gaps, not evidence of generic improvements in those unverified builds.

Sources: Mac product, Install guide, System requirements, 5.28 announcement, 5.27.1 notes, Mac guide, Full Disk Access, Web protection permissions, Privacy policy and Mac statistics control.