This Mac malware is somehow using iCloud calendar invites to try and steal your data
- Kaspersky uncovers MacSync, a Mac infostealer delivered via iCloud calendar events and fake apps
- Loader fetches instructions from calendar entries, then deploys malware exfiltrating credentials, wallets, and developer data
- Newer variants add Objective‑C backdoor spoofing Finder, persistence, and expanded targeting of crypto and IT users
Cybercriminals have found a way to use iCloud calendar events and cloud storage to deliver a powerful infostealer to Mac devices.
The malware is called MacSync, and it’s hiding behind fake crypto wallets, or “cracked” commercial software.
Security researchers Kaspersky, who discovered the ongoing campaign, are urging Mac users to exercise caution when downloading programs, especially from third-party websites, and to be very skeptical of apps prompting for their admin password.
Why calendar?
Getting people to download and run malware on their devices is not as easy as it sounds.
The victims need to be somehow tricked into downloading and running an app, and even...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
