This Mac malware is somehow using iCloud calendar invites to try and steal your data

(Image credit: Unsplash)

Kaspersky uncovers MacSync, a Mac infostealer delivered via iCloud calendar events and fake apps

Loader fetches instructions from calendar entries, then deploys malware exfiltrating credentials, wallets, and developer data

Newer variants add Objective‐C backdoor spoofing Finder, persistence, and expanded targeting of crypto and IT users

Cybercriminals have found a way to use iCloud calendar events and cloud storage to deliver a powerful infostealer to Mac devices.

The malware is called MacSync, and it’s hiding behind fake crypto…