macOS users being attacked by a fake Zoom installer with CloudSyncD backdoor

macOS users being attacked by a fake Zoom installer with CloudSyncD backdoor

A macOS dropper was found in a disguised Zoom client. The malware is tracked as CloudSyncD and is designed to provide a persistent and stealthy backdoor. Jamf researchers first noticed this still-in-development malware in mid-September. Within days, additional samples were found, indicating that testing and development has now progressed to deployment. The malware infection process … Read more