Hunting MacSync Stealer infrastructure through behavioral pivots
Microsoft reported on a data-stealing threat aimed at Mac computers that keeps changing website addresses to avoid being blocked. Even though the web addresses change often, the attackers’ patterns stay similar, which helped researchers identify many related sites.
Who is at risk
People and organizations using Mac computers are most at risk, especially those who download software, open unexpected links, or enter passwords on unfamiliar websites.
What to watch for
Watch for unexpected password prompts, suspicious download pages, browser pop-ups, or signs that accounts tied to your Mac are being accessed without your permission.
What to do
Update your Mac and browser, avoid clicking unfamiliar links or downloads, and change important passwords immediately if you think you entered them into a suspicious site.