Macs, Meet MacSync: How a Terminal Copy-Paste Became the Hottest New Crypto Heist A single Terminal paste—triggered by poisoned Google ads and fake ChatGPT links—empties Mac keychains while Apple’s guards sleep.

📍Macs, Meet MacSync: How a Terminal Copy-Paste Became the Hottest New Crypto Heist.

A single Terminal paste—triggered by poisoned Google ads and fake ChatGPT links—empties Mac keychains while Apple’s guards sleep.

#MacSync #CyberAttack #Apple

factide.com/macs-meet-ma...

Google Ads and Claude AI Abused to Spread MacSync Malware via ClickFix Hackers are using hijacked Google Ads and fake Claude AI guides in a new ClickFix attack to trick Mac users into installing MacSync malware.

📢⚠️ Hackers are abusing hijacked Google Ads and fake Claude AI guides in a new #ClickFix attack targeting Mac users. Victims are tricked into pasting malicious Terminal commands that install #MacSync.

Read more: hackread.com/google-ads-c...

#CyberSecurity #macOS #Malware #GoogleAds #ClaudeAI

New macOS malware 'MacSync' targets cryptocurrency users via deceptive Terminal commands. Stay vigilant! #MacSync #macOS #CyberSecurity #Cryptocurrency #MalwareAlert Link: thedailytechfeed.com/macsync-malw...

MacSync: il malware per macOS che ti svuota il wallet… dopo settimane

📌 Link all'articolo : www.redhotcyber.com/post/mac...

#redhotcyber #news #macos #malware #cybersecurity #hacking #macsync #cloudsecurity #socialengineering #malwareasaservice #sitiwebfasulli

New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that's delivered by means of a digitally signed, notarized Swift application masquerading as a messaging app installer to bypass Apple's Gatekeeper checks. "Unlike earlier MacSync Stealer variants that primarily rely on drag-to-terminal or ClickFix-style techniques, this sample adopts a more

iT4iNT SERVER New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper VDS VPS Cloud #MacSync #macOS #AppleSecurity #Cybersecurity #InfoStealer

Downloading the initial file, a DMG image.

Screenshot showing the malicious downloaded DMG image and the associated malicious Mach-O file within the installer.app content.

Traffic generated by the MacSync Stealer malware, filtered in Wireshark.

Example of the data exfiltrated through the MacSync Stealer C2 traffic.

2025-12-23 (Tuesday): Based on yesterday's Jamf article, I ran the fake installer for #MacSyncStealer in my lab on a macOS host. A #pcap of the #MacSync #Stealer traffic, the associated IOCs, the #malware sample, and a link to the Jamf article are at www.malware-traffic-analysis.net/2025/12/23/i...

MacOS : cette version du malware MacSync contourne Gatekeeper MacOS a été pris pour cible par une nouvelle variante du logiciel malveillant MacSync capable de contourner Gatekeeper, grâce à une application Swift signée.

MacOS : cette nouvelle version du malware MacSync contourne la sécurité de Gatekeeper
www.it-connect.fr/macos-nouvel...

#Infosec #Security #Cybersecurity #CeptBiro #MacOS #Malware #MacSync #Gatekeeper

New MacSync malware dropper evades macOS Gatekeeper checks The latest variant of the MacSync information stealer targeting macOS systems is delivered through a digitally signed, notarized Swift application.

New MacSync malware dropper evades macOS Gatekeeper checks
www.bleepingcomputer.com/news/securit...

#Infosec #Security #Cybersecurity #CeptBiro #MacSync #Malware #macOS #GatekeeperChecks