MacSync under the microscope: new delivery methods and a new payload
2026-10-15T08:51:46Z•ed02bf2a5aaba5fac9c38a97b0081b93e1296d40f5b98cc7b0cbe163a26006e1
active-directoryandroidaptbackdoorblockchainc2element-messengerexploitsgithubgroup-policyicsindustrial-control-systemsinfostealerjavascriptmacosmalwaremqttnodejsproxy-botnetransomwarethreat-intelligencetorrent-distributionvulnerabilities
What happened
Kaspersky Securelist digest covering September–August 2026 research on macOS stealer and backdoor activity, ransomware abuse of Active Directory Group Policy, torrent-delivered malware using blockchain-based C2 concealment, APT campaigns, novel backdoors, industrial-control threats, vulnerability trends, and Android proxy-botnet malware. The collection reflects active and evolving threats across enterprise, developer, financial, aviation, ICS, and consumer environments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- kaspersky_securelist
- Record identifier
- ed02bf2a5aaba5fac9c38a97b0081b93e1296d40f5b98cc7b0cbe163a26006e1
- Enrichment time
- 2026-10-15T08:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.