TF-MAL-osx.cloudsyncd
📛 Threat Title
Malware family: CloudSyncD
Description
ThreatFox malware family `osx.cloudsyncd`. Printable name: CloudSyncD.
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (8)
-
web:cybersecuritynews.com
A fake Zoom installer is tricking Mac users into handing over their login passwords and launching CloudSyncD , a newly identified backdoor. The malware hides inside an application that looks familiar, using installation instructions and counterfeit prompts to turn routine setup into a privileged infection.
-
web:securityaffairs.com
Jamf Threat Labs details CloudSyncD , a fake macOS Zoom installer that hides a phished password using invisible zero-width Unicode characters.
-
web:securityarsenal.com
Jamf Threat Labs uncovered CloudSyncD , a macOS backdoor posing as a Zoom installer that conceals phished credentials using invisible zero-width Unicode characters. Here's how to detect and eradicate it.
-
web:socprime.com
CloudSyncD is a two-stage macOS backdoor distributed through a fake Zoom installer disk image. The first stage steals user credentials through a fraudulent authorization prompt and hides the captured password inside a decoy configuration file using zero-width Unicode characters.
-
web:www.broadcom.com
According to Jamf Threat Labs, researchers discovered a two-stage macOS backdoor dubbed CloudSyncD that arrives hidden inside fake Zoom application installers. The malicious dropper convinces users into bypassing Gatekeeper protections and entering their system password.
-
web:www.infosecurity-magazine.com
A new macOS backdoor has been hidden inside a fake Zoom installer that prompts users for their login password before launching an embedded second stage. The malware , dubbed CloudSyncD , has moved from development testing to samples configured against live command-and-control (C2) infrastructure. Jamf ...
-
web:www.jamf.com
Jamf Threat Labs analyzes CloudSyncD , a fake Zoom installer that phishes the Mac login password, hides it in zero-width Unicode and launches a backdoor.
-
web:www.mcafee.com
Jamf Threat Labs discovered CloudSyncD , a Mac malware hiding inside fake Zoom installers that steals passwords and gives attackers remote control.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.