MEDIUMMalware
Global

MacSync under the microscope: new delivery methods and a new payload

·Source: Securelist (Kaspersky)

Updated:

Executive Summary

We look at a new version of the MacSync macOS stealer with a backdoor module that targets crypto enthusiasts and developers.

Analysis

We look at a new version of the MacSync macOS stealer with a backdoor module that targets crypto enthusiasts and developers.
Source Attribution

Originally published by Securelist (Kaspersky) on Sep 24, 2026.

Related Threats

LOWMalware

Microsoft says threat actors are ahead in the early AI race

Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and post-compromise activity while security teams struggle to keep pace. [...]

BleepingComputer
MEDIUMMalware

Researchers find Chinese hacking campaigns targeting AI firms, Asian governments

Two separate reports by cybersecurity companies highlight China-linked hacking operations, including a phishing campaign that impersonated Western experts.

The Record
MEDIUMMalware

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC after the "SC_" markers present in the injected content. Sucuri has described the malware as a "self-healing mesh" that's

The Hacker News