MacSync is a malware family tracked across 9 threat clusters and 16 intelligence report mentions on ThreatCluster. First observed December 23, 2025; most recent activity July 16, 2026.
The InstallFix campaign targets users by creating fake installation pages for Anthropic's Claude AI, tricking them into executing malware. This sophisticated social engineering tactic exploits the growing reliance on AI…
In 2026, stolen credentials are identified as a critical cybersecurity risk, with 85% of organizations ranking them as a high priority. Despite this, many enterprises rely on inadequate checkbox solutions and generic…
Hackers are exploiting macOS users through weaponized DMG files that masquerade as legitimate software installers. This tactic leverages the misconception that Apple devices are immune to malware, allowing attackers to…
A ClickFix-style malware campaign was detected spreading through a sponsored ad on X, originating from a verified account. The ad masqueraded as the legitimate Mac app DynamicLake, leading users to a malicious domain,…
In H1 2026, telemetry from Gen's Threat Report revealed that AI agents are executing malicious actions within developer workstations and cloud environments. These actions include attempts at reverse shells,…
A new variant of the MacSync stealer malware has been identified, exploiting Apple's notarization process to bypass security measures on macOS devices. This malware poses a risk to sensitive user data by disguising…
Infostealer threats have shifted from primarily targeting Windows to macOS environments, as reported by the Microsoft Defender Security Research Team. Since late 2025, these campaigns have utilized cross-platform…
MacSync, a new macOS infostealer, is targeting cryptocurrency users through social engineering tactics. This malware operates as a Malware-as-a-Service tool, tricking victims into executing a command in their Terminal…
A new variant of the MacSync malware has been identified, targeting macOS users by masquerading as a signed, notarized Apple application. This allows it to bypass the macOS Gatekeeper security feature and steal…