Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
7 IOCs
MacSync: The Evasive macOS Stealer Exploiting ClickFix Lures
Threat Actors
Malware Families
Excerpt
Executive Summary MacSync Stealer is a family of macOS information stealers and remote-access stagers designed to evade detection and sold commercially under a malware-as-a-service (MaaS) model. In the attack chain, MacSync binaries are native stagers and multi-part exfiltration engines. Rather than standalone harvesters, the payloads are lightweight 64-bit Mach-O executables that detach silently from terminal sessions, load credential-dumping modules directly into memory,…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(3)
Victim
Indicators of Compromise
Open the mindmap →7 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | de62a2f47d1c7dec2997f931a050a615 | Medium | Score 53/100 | First seen |
| SHA256 | c4f70f37daae63fe47b0c92adf006f8cf50b6c522ad572a4014275cf979013a0 | Medium | Score 53/100 | First seen |
| SHA1 | d182eb7cba0ffa42d770d7b0d3499e49f24163a2 | Medium | Score 53/100 | First seen |
| SHA256 | d182eb7cba0ffa42d770d7b0d3499e49f24163a2662494ae615713c5f04b5260 | Medium | Score 53/100 | First seen |
| SHA256 | 9ff32f7c0108e9d27a3b491edf04827b6ca025f44db68aeadc44eeb97c9aab11 | Medium | Score 53/100 | First seen |
| MD5 | 9678f71ea4cccbc3d511dc8d7f24b113 | Medium | Score 53/100 | First seen |
| SHA1 | 59508d071661ea70fa5fcbe6f9e2fb72506e57df | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…