A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads.

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads. [...]

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads.

Cybersecurity researchers have discovered a new MacSync malware campaign using public iCloud calendar invites to infect macOS systems.

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads.

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads.

Un nuevo variantes de MacSync utiliza eventos de calendarios públicos de iCloud para descargar malware. El ataque se ejecuta a través de herramientas falsas.

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads. The malware leverages this technique as a command and control mechanism to distribute malicious code to infected systems.

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads.

MacSync malware exploits iCloud calendar events to stealthily deliver infostealers targeting Mac users, especially developers and crypto enthusiasts. Learn how it works and how to protect yourself.

Cet article présente une analyse technique approfondie d'une nouvelle variante du stealer macOS MacSync, détectée pour la première fois dans la nature en septembre 2026. MacSync est une famille de crypto/info stealers relativement récente, d'abord annoncée sur le dark web en 2025 sous le nom Mac.c, puis renommée par ses créateurs.

Blog sobre informática, tecnología y seguridad con manuales, tutoriales y documentación sobre herramientas y programas

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads.

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads.

The latest version of the MacSync info-stealing malware for macOS can hide its malicious commands inside a public iCloud calendar.

The latest version of the MacSync info-stealing malware for macOS can hide its malicious commands inside a public iCloud calendar.

A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads.

Kaspersky has uncovered a new MacSync variant that uses an infostealer and a persistent backdoor to steal credentials, crypto wallet data, files, and developer-related information from Mac users. The campaign spreads through a fake crypto wallet app called Toria and uses advanced infection chains, disguised prompts, and a backdoor posing as Finder to target developers and crypto enthusiasts. #MacSync #Kaspersky #Toria #Finder #Ledger #PAM #Keychain

A new MacSync variant is targeting macOS users by hiding its payload delivery in public iCloud calendar events, adding a more evasive infection chain. The malware continues stealing browser, crypto, and system data while also introducing an Objective-C backdoor that can run AppleScript, deploy extensions, and maintain persistence. #MacSync #iCloud #macOS #Finder #Toria

The MacSync malware exploits public iCloud calendars as dead drops to hide shell commands in the DESCRIPTION field. The technique bypasses reputation-based filters that trust traffic to caldav.icloud.com but do not inspect calendar content.