Cybersecurity News

MacSync Stealer: How a Google Search for Claude Led to a macOS Infostealer

August 17, 2026

Researchers at Huntress discovered a macOS infostealer called MacSync Stealer being distributed through fake download pages impersonating Claude Code. Users searching for the AI tool were directed to malicious sites that delivered the malware, which steals sensitive data. Huntress SOC analysts reverse engineered the threat and published a full breakdown of its behavior and distribution method.

• macos malware
• infostealer
• claude ai
• seo poisoning
• malware analysis
• cybersecurity

Reverse Engineering the Six Stages of MacSync Stealer and RAT

July 29, 2026

Researchers reverse-engineered MacSync, a six-stage macOS malware combining stealer and remote access trojan capabilities. The sample was recovered from attacker infrastructure after the compromised host went offline. Analysis traced its execution chain across all six stages, revealing how it exfiltrates data and maintains remote access on infected machines.

• macos malware
• reverse engineering
• stealer
• remote access trojan
• malware analysis
• threat research