MacSync under the microscope: new delivery methods and a new payload

Kaspersky Securelist RSS entries describing multiple 2026 threat campaigns and reports, including macOS infostealing, ransomware abuse of Active Directory Group Policy, torrent-delivered malware using Solana for C2 concealment, APT activity exploiting AD and RDP, MQTT and Matrix-based backdoors, sector-targeted malware, ValleyRAT distribution, industrial-control-system threats, vulnerability trends, and Android proxy-botnet malware. The collection is broad threat intelligence rather than a single incident; no specific CVE identifiers are provided in the feed metadata.