MacSync: The Evasive macOS Stealer Exploiting ClickFix Lures

Reported 08 Sep 2026 by otx · Severity: medium

MacSync Stealer is a macOS information stealer and remote-access stager delivered through ClickFix social engineering and malvertising campaigns. Operating under a malware-as-a-service model, it employs sophisticated evasion techniques including process daemonization, single-byte