# MacSync malware uses public iCloud calendars to deliver new payloads

> **Newsylist Open Intelligence Dossier** · First detected: 2026-09-25 18:29 UTC · Category: Technology · Sources: 5 · Current Velocity: 2.8

## Key People, Organizations & Locations
MacSync

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| SOC Prime | PamStealer Moves to Swift With Server-Side Decryption | 2026-09-24 20:53 | [Source Link](https://news.google.com/rss/articles/CBMioAFBVV95cUxPNk1HSkVXalNJN0lIam1RY0RMOXlTZjdRZXg4dmI5NVJiRlBZOFFpdWk4X3JwTHIzc2hMWTJIM0dOdER0dEJLeEQwYm1xRGFnNnphT2t1Sng1cmlsaE1kZnl0a3gwbzZucS1FcXRKQmQyUGl6QU9ON3U4cjc0X2lreWZJbWZmN2J0UmUtWHVBUFlNMFFNaE55bUdpUlc4TDN3?oc=5) |
| TechRadar | This Mac malware is somehow using iCloud calendar invites to try and steal your data | 2026-09-24 20:53 | [Source Link](https://news.google.com/rss/articles/CBMiwAFBVV95cUxNQm9mSV9UY1lvcXUyU0dzTmExN3NCanY5cDhrbWh1c0pubWlCV3Vvc2NSbHlIbnJOSS1LeTB5V3d5dXdwdkV5dnNTQVE1NXp5dWFrNEZXUE1fMFdHd3VsMi1zajhKM3p6aXVpWmp1aHBvYXViTDNCTlRqMjlTdFFjUXR1R0lleW4tamliMUYzSUpDSXFhb1dxR2pueFhaMW9naDQ5Sy1ucmdOZVhqcklZVFctYkI2VUM1a1p5MWMzWVo?oc=5) |
| Securelist | A new version of the MacSync macOS stealer targets crypto enthusiasts and developers | 2026-09-24 20:53 | [Source Link](https://news.google.com/rss/articles/CBMiX0FVX3lxTE8yWjY4V0ZnNmRHY0dNdk51Y3lqcmV6N1JjR0RMRWRtc2Z6aXpEWTZVZW5rcGRkeHF4OW9JWERkRlFSUl9QWEpYMmhQem50WlltUEhJRmFnQWhkdW1JcE5z?oc=5) |
| The Hacker News | PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence | 2026-09-24 20:53 | [Source Link](https://news.google.com/rss/articles/CBMiggFBVV95cUxOZTlhczE5dXdXYjhNT1pnNHEwT2xvVVh2NUU5Y0M0c0tXMnl2X3dpSlJHd2lpbkZVREwtQXZNaG9LRjNzNHBiZUpYVEstUl9NN2lPZHRJbEZDdlNkQzR3QnRmRTItT0dLcDN6SkxHOFVPemhKZE14VEpJeWtzRUlzdTJR?oc=5) |
| bleepingcomputer.com | MacSync malware uses public iCloud calendars to deliver new payloads | 2026-09-24 20:53 | [Source Link](https://news.google.com/rss/articles/CBMitwFBVV95cUxPeTFuSHhOUWhwYWRabUVDWnNoOXpteVNha0tieElqMllmWHprRHZTVERuY1NWLUdHS2pBbUJ6VS1DbXJnNGpoS0hONHV4TktVZ0w4QlgxMmNhNDg1RlY0eUxZMzNoQ2piUWhKRTczOWV3SEQ4SlExTk8wX3VTZEJsZ1FhVl9hZC1MaUFBQ3QyTDdVLWhBUVFFYVRLU1p6ZnRDUFlobjNtTEF2MkxVUmg0YXlVeTdpeGfSAbwBQVVfeXFMT1pyX0hTRDJJbFNLVEktX1psZHlpdkNTTDVVa0lFSXhKQ0NwMXNfZ3pQckdvWkFWTXFzX3YyR3B0a24wbzRsN3JYYUtWbGFhLWtBZjJMQjQxVVNKbk05bktjVGphbzBvVDlmcURMeC1BZHhXUGpjb3NFOEVEOVJndmdYYmhKQkp6Vmk2U0ZwV240M2t6Y0xtZk1mb05) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-09-25/macsync-malware-uses-public-icloud-calendars-to-deliver-new-payloads*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*