MacSync under the microscope: new delivery methods and a new payload

Kaspersky Securelist entries describing recent malware campaigns and threat research, including the MacSync macOS stealer/backdoor, PAYLOAD ransomware abusing Active Directory Group Policy, MovieReaper distributed through compromised torrents with blockchain-based C2, NightEagle activity targeting Russian organizations, Toy Ghouls backdoors using MQTT and Element, Mirage Kitten malware targeting aviation and FinTech, ValleyRAT disguised as adware, industrial-control-system threats, vulnerability and exploit trends, and Android malware targeting automotive head units to create an ad-serving and