A fake crypto wallet app hides its C2 commands inside a public iCloud calendar event. https://intel.threadlinqs.com/threat/TL-2026-2723 #ThreatIntel #MacSync #http #Toria

Kaspersky found MacSync malware hiding commands in an iCloud calendar, using a fake Toria wallet app and a Finder impostor to steal passwords, crypto data, files, and developer info from Macs. #MacSync #Kaspersky #Toria