MacSync under the microscope: new delivery methods and a new payload

Kaspersky Securelist RSS entries covering September–August 2026 threat intelligence, including macOS infostealing with a backdoor, ransomware abusing Active Directory Group Policy, torrent-delivered multi-stage malware using Solana for C2 concealment, APT campaigns targeting Russian organizations and Middle Eastern and African sectors, MQTT/Matrix-based backdoors, ValleyRAT distribution, industrial control system threats, vulnerability and exploit trends including AI frameworks, and Android malware building an advertising proxy botnet.