macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor

October 1, 2026 · 1:30 pm 2 sources

Image: Infosecurity Magazine

Coverage

Coverage

• CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer
  Infosecurity Magazine · October 1, 2026 13:30
  CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor
• macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
  SecurityWeek · October 2, 2026 13:15
  The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime. The post macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor appeared first on SecurityWeek .