Back Mactech

Jamf Threat Labs reports on variant of the MacSync Stealer malware

Mactech • December 22, 2025

Specifically, Jamf Threat Labs observed a signed and notarized stealer that didn't follow the typical execution chains we have seen in the past. The ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New MacSync Malware Exploits Apple Notarization to Steal User Credentials A new variant of the MacSync stealer malware has been identified, exploiting Apple's notarization process to bypass security measures on macOS devices. This malware poses a risk to sensitive user data by disguising itself as legitimate software. Recent reports detail the tactics used by cybercriminals to persuade users to install this malicious software. 16 sources 51

Jamf Threat Labs reports on variant of the MacSync Stealer malware

The full story

Extracted Entities

Attack Types (1)

Malware (1)