Story perspectives

New MacSync Stealer Evades Apple Security, Experts Warn

1/2/2026

Center

MacSync Stealer Threat

A new MacSync Stealer variant bypasses Apple's security and spreads via signed, notarized malicious apps.
Attackers use compromised or purchased Developer ID certificates to evade detection.
Notarization checks the app only at submission.
Experts advise downloading from trusted developers or the Mac App Store to mitigate risks as 2026 approaches.

Right

Cybercriminals Exploit AI

Cybercriminals exploit trust in AI chat tools to spread malware, targeting Mac users via AI conversations in Google search results that lead to Atomic macOS Stealer (AMOS) installation.
Researchers identify a campaign where conversations direct users to run commands that install malware.
Attackers use prompt engineering to craft guides and manipulate results.
You should protect users by avoiding terminal commands from unverified sources and keeping systems updated.

1 of 2

MacSync Stealer Threat

A new MacSync Stealer variant bypasses Apple's security and spreads via signed, notarized malicious apps.
Attackers use compromised or purchased Developer ID certificates to evade detection.
Notarization checks the app only at submission.
Experts advise downloading from trusted developers or the Mac App Store to mitigate risks as 2026 approaches.

1 / 2