New MacSync Stealer Uses Signed macOS App to Evade Gatekeeper and Steal Data

Cybersecuritynews •Dhivya • January 10, 2026

Cybersecurity researchers have discovered a new variant of the MacSync malware targeting macOS users. Unlike versions that relied on complex ClickFix techniques, this iteration masquerades as a legitimately signed, notarised Apple application, thereby bypassing macOS Gatekeeper security and stealing sensitive data. Code-Signed Malware Bypasses Security Jamf Threat Labs recently identified this evolved MacSync stealer, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New MacSync Malware Variant Evades macOS Security to Steal Data A new variant of the MacSync malware has been identified, targeting macOS users by masquerading as a signed, notarized Apple application. This allows it to bypass the macOS Gatekeeper security feature and steal sensitive data. The malware was recently discovered by Jamf Threat Labs. 1 sources 42

Extracted Entities

New MacSync Stealer Uses Signed macOS App to Evade Gatekeeper and Steal Data

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)