Fake Zoom installer spreads CloudSyncD backdoor on macOS — 02.10.2026

The macOS malware CloudSyncD is hidden in a fake Zoom installer. After successful activation, it installs a persistent and stealthy backdoor, profiles the host, collects system and user details, and exfiltrates them to its command-and-control (C2) server.