Microsoft Identifies 30+ Rotating Domains Linked to MacSync Stealer Malware

Microsoft identified over 30 rotating domains linked to the MacSync Stealer malware through behavioral analysis of endpoint and network patterns. The malware steals sensitive data including credentials and macOS Keychain material via orchestrated execution chains and HTTP PUT exfiltration techniques.

Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused information stealer, after correlating recurring endpoint and network behaviors across changing infrastructure, tracing the malware from payload retrieval through data collection, staging, and exfiltration.

The tech giant said it required multiple endpoint and network behaviors to align before

Read original article