MacSync under the microscope: new delivery methods and a new payload

Kaspersky Securelist RSS feed covering September–August 2026 threat research, including macOS stealer and backdoor activity, ransomware abusing Active Directory Group Policy, torrent-delivered Trojans using Solana for C2 concealment, APT campaigns targeting Russian organizations and Middle Eastern/African aviation and FinTech sectors, MQTT and Matrix-based backdoors, ValleyRAT distribution, industrial-control-system threats, vulnerability and exploit trends including AI frameworks, and Android malware building an advertising proxy botnet. The material describes multiple active malware families