CloudSyncD Uses Invisible Unicode to Hide Phished Mac Passwords in Plain Sight

A new macOS backdoor, tracked as CloudSyncD, that masquerades as a Zoom installer and uses invisible Unicode characters to conceal a victim’s phished password inside a seemingly harmless configuration file. The malware was found during routine VirusTotal monitoring embedded in a fake Zoom client distributed as a disk image named “Zoom.” Its visual... Weiterlesen: CloudSyncD Uses Invisible Unicode to Hide Phished Mac Passwords in Pl…