Inquiry about iTerm 3.6.2 being flagged as “will damage your computer” and removed on macOS
Hello Apple Support Team,
I’m writing to report and inquire about an issue where iTerm version 3.6.2 is suddenly being flagged by macOS with the warning message: “iTerm will damage your computer.”
+ Related discussion: https://www.reddit.com/r/applehelp/comments/1odolnu/app_suddenly_flagged_as_malware/
In some cases, the app is even automatically removed or quarantined by the system.
The application was downloaded directly from the official iTerm2 project website and has been used safely for a long time without any previous warnings.
This issue started occurring recently, without any user modifications to the app itself.
Multiple users have also reported the same behavior on Reddit and other forums,
but there is currently no verified evidence of actual malware activity (e.g., C2 connections or malicious payloads).
Therefore, this seems likely related to macOS security policy changes,
expired or invalid code-signing certificates, or notarization verification failures.
I would like to request clarification on the following:
- The exact reason why iTerm 3.6.2 is being flagged as “malware” and deleted by macOS (e.g., invalid code signature, notarization failure, or recent Gatekeeper policy update)
- Whether Apple has confirmed any real malware detection associated with iTerm 3.6.2
- Whether this version has been added to Apple’s official blocking or quarantine lists (e.g., XProtect, MRT, or Gatekeeper)
- Recommended user actions — such as reinstalling the latest notarized version or verifying the app’s signature manually
We would appreciate Apple’s official confirmation on whether iTerm 3.6.2 is considered safe,
and any technical guidance on how to resolve or prevent this issue in the future.
Thank you for your time and assistance.
Sincerely,
[Edited by Moderator]
