Skip to content
New MacSync Malware Exploits Apple Notarization to Steal User Credentials

New MacSync Malware Exploits Apple Notarization to Steal User Credentials

First seen 23 Dec 2025, 03:57 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A new variant of the MacSync stealer malware has been identified, exploiting Apple's notarization process to bypass security measures on macOS devices. This malware poses a risk to sensitive user data by disguising itself as legitimate software. Recent reports detail the tactics used by cybercriminals to persuade users to install this malicious software.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 217d ago How this analysis works

More articles in this cluster (16)

Following this threat?

Track MacStealer and CVE-2025-31199 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed