A new version of the MacSync macOS stealer targets crypto enthusiasts and developers

Reported 24 Sep 2026 by otx · Severity: medium

A detailed technical analysis examines the evolution of MacSync, a macOS stealer-as-a-service initially known as Mac.c, which targets cryptocurrency enthusiasts and developers. The malware has undergone significant changes, replacing AppleScript-based droppers with binary executa