Thehackernews Microsoft Identifies Over 30 Domains Linked to MacSync Stealer Malware
Article Content
- •Over 30 domains associated with MacSync Stealer malware identified by Microsoft.
- •Malware targets macOS systems, facilitating credential theft and data exfiltration.
- •Defenders advised to prioritize behavioral detection over static domain monitoring.
Microsoft has linked more than 30 rotating domains to the MacSync Stealer, a malware targeting macOS systems. This infrastructure supports various malicious activities, including credential theft and data exfiltration. The malware operates through interactive zsh sessions and utilizes curl to fetch payloads. The investigation emphasizes the need for defenders to focus on behavioral detection methods rather than solely relying on static domain-based approaches. The ongoing threat poses risks to users of macOS devices, highlighting the necessity for enhanced security measures.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track MacSync Stealer in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
HBO Max Account Compromise Fuels ClickFix Malware Campaign In September 2026, hackers compromised the verified HBO Max Reddit account, launching a ClickFix campaign that distributed 108 malicious ads over 48 hours. The ads targeted both macOS and Windows users, tricking them into executing commands that installed information-stealing malware. This operation, dubbed… 
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…