MacSync’s New Infection Chain Shows How Mac Malware Is Becoming More Sophisticated
Kaspersky reports MacSync’s new macOS chain uses native loaders, iCloud staging, an infostealer, and a persistent backdoor.
74
Malware
PamStealer
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenSep 23, 2026
- Last mentionedSep 28, 2026
Timeline
4 articles · newest firstPamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
Updated PamStealer decrypts its macOS payload only with live C2 help and adds layered persistence.
62
Fake Crypto Wallet App Delivers PamStealer Malware That Hijacks Mac Credentials
A new PamStealer variant for macOS spreads via a fake crypto wallet, using server-assisted decryption to steal credentials, Keychain data, and crypto assets.
55
Fake Crypto Wallet App Spreads PamStealer Malware to Steal Mac Passwords
A fake Mac crypto-wallet app delivers new PamStealer malware that steals passwords and browser credentials.
61
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.