Technology
Mac malware version hides commands in iCloud calendar entries, report says
Researchers found that a MacSync variant executes instructions embedded in public iCloud events, Fox News reports.
The short version
- Security researchers discovered an updated variant of the MacSync malware that can use public iCloud calendar events to deliver instructions.[Fox News]
- According to Kaspersky, attackers placed commands inside event descriptions rather than relying solely on dedicated servers.[Fox News]
- Certain details remain unclear because researchers lacked the specific AppleScript payloads and could not identify the purpose of a relay component.[Fox News]
Key facts
- Security researchers uncovered a new version of MacSync malware that incorporates a public iCloud calendar event into its infection chain.[Fox News]
- Kaspersky identified an infection chain where malicious commands were stored inside the description field of an iCloud calendar entry.[Fox News]
- The malware originally emerged on the dark web under the name Mac.c in 2025 before being rebranded as MacSync.[Fox News]
- While at least one analyzed sample connected to an iCloud calendar, other analyzed samples communicated with attacker-controlled servers.[Fox News]
What remains uncertain
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.