
Fake Zoom installer hides macOS backdoor CloudSyncD
Jamf analyzes CloudSyncD, a fake macOS Zoom installer that steals passwords and deploys a backdoor.
12 stories, newest first · one card per story

Jamf analyzes CloudSyncD, a fake macOS Zoom installer that steals passwords and deploys a backdoor.

Jamf says a fake Zoom macOS installer now deploys the CloudSyncD backdoor for persistent access.

A fake Zoom installer tricks Mac users into launching CloudSyncD, a new privileged backdoor.

Jamf found CloudSyncD, a macOS backdoor in a fake Zoom installer that captures a password to launch its payload.

Updated PamStealer decrypts its macOS payload only with live C2 help and adds layered persistence.

A fake Mac crypto-wallet app delivers new PamStealer malware that steals passwords and browser credentials.

A comparison of 12 mobile threat defense vendors highlights Zimperium's on-device detection and notes Kaspersky's US exit and Wandera's Jamf absorption.

A comparison of 12 MDM platforms ranks Microsoft Intune as best value for Microsoft 365 estates and Jamf, Kandji, and Mosyle for Apple fleets.

A 2026 MDM buyer guide ranks ten solutions, recommending Microsoft Intune for Microsoft 365 estates and Jamf for Apple-only environments.

A 2026 buyer's guide ranks UEM platforms, recommending Intune for Microsoft 365 shops, Jamf for Apple estates, and SOTI for rugged devices.

Jamf details AmnesiaStealer, a new Rust-based macOS infostealer that hijacks Chromium sessions for live attacker-controlled browser access and steals Keychain data.

Jamf Threat Labs analyzed AmnesiaStealer, a Rust-based macOS infostealer spread via fake GitHub pages that also grants live hidden browser control.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views