MacSync malware evolves with iCloud calendar-based payload delivery and new backdoor
A new variant of the MacSync info-stealing malware for macOS is now using public iCloud calendar events to deliver fresh payloads, according to researchers at Kaspersky. The malware, which first emerged in April 2025, has also added a sophisticated backdoor module that disguises itself as the default macOS file manager, Finder.
