MacSync under the microscope: new delivery methods and a new payload

Kaspersky Securelist RSS collection covering September–August 2026 threat research, including macOS information stealers, ransomware abuse of Active Directory Group Policy, torrent-delivered Trojans using Solana for C2 concealment, APT campaigns, MQTT/Element-based backdoors, sector-targeted malware, ValleyRAT delivery, industrial control system threats, vulnerability and exploit trends, and Android proxy-botnet malware. The collection describes multiple active campaigns and malware families affecting enterprise, government, industrial, developer, cryptocurrency, aviation, financial, and end用户