MacSync under the microscope: new delivery methods and a new payload

Kaspersky Securelist RSS entries covering recent threat activity, including macOS information stealers, ransomware abuse of Active Directory Group Policy, torrent-delivered Trojans using blockchain-based C2 concealment, APT campaigns, MQTT and Matrix-backed backdoors, targeted malware against aviation and financial sectors, ValleyRAT, industrial control system threats, vulnerability and exploit trends, and Android proxy-botnet malware. The collection describes multiple active campaigns and novel attack techniques across endpoints, enterprises, OT, and mobile platforms.