Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure

Back Thehackernews

Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure

Thehackernews •[email protected] (The Hacker News) • August 19, 2026

Share: View original

AI can find and chain vulnerabilities in minutes. This session gives you a practical roadmap to strengthen visibility, response, and remediation.

AI is helping teams ship code 10–50× faster. This session shows how to keep security from falling behind.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Identifies Over 30 Domains Linked to MacSync Stealer Malware Microsoft has linked more than 30 rotating domains to the MacSync Stealer, a malware targeting macOS systems. This infrastructure supports various malicious activities, including credential theft and data exfiltration. The malware operates through interactive zsh sessions and utilizes curl to fetch payloads. The investigation emphasizes the need for defenders to focus on behavioral detection methods rather than solely relying on static domain-based approaches. The ongoing threat poses risks to users of macOS devices, highlighting the necessity for enhanced security measures. 4 sources 52

Extracted Entities

Attack Types (1)

Malware (1)

MacSync Stealer