# Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure

> **Open Intelligence Dossier** · First detected: 2026-08-20 02:07 UTC · Category: Technology

## Executive Summary
7 news sources are covering this Technology story right now — PULSE is tracking how fast it spreads.

## Intelligence Brief
"Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure" is generating significant coverage in the Technology category, with 8 articles from 7 distinct sources tracked by PULSE so far.


Outlets currently covering the story include SOC Prime, Курс України, CyberSecurityNews and TechRadar. PULSE measures a story's velocity from how quickly new articles appear and how many independent newsrooms join the coverage.


This brief was generated by PULSE's extractive engine from coverage metadata only. The latest headlines from every source are listed below; the velocity chart shows how the story is developing in real time.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| SOC Prime | Google Search for Claude Delivers MacSync Stealer | [Source Link](https://news.google.com/rss/articles/CBMioAFBVV95cUxObGxQZUdLeUhhblNXN0pOTG51eS01elhJYzk2bzNzTWpQeGxPSjlodDZ2U1pHWXVCN3dBWXVmTVM1cnNoOVMxOW5pTDRCM3FkdmJFZnBhV3pQWngyQWVPam5UNnBUQk9MNTB2aGFYTF9oTTllb2p1cWlQb2hsU19LbXNxWEl2LXJzTXBQZjhCdHJ0UW5FaTdlcTdTNk9NOGJy?oc=5) |
| Курс України | Microsoft Has Found a New Way to Track Hacker Attacks on Users | [Source Link](https://news.google.com/rss/articles/CBMisAFBVV95cUxQLUtDSzF1OFp5TTFydWJWRmtTRzdwNDlqRDVhTDVTaldjS2R5MnlDQ0ZOOHhIMGlwdFlYY2hMd3ZTeGEtcUJZSGp5RW4yYXJralhyMFhXbGVWbF9FVDZ2YVRxd0pleE14bFlEOE56OWdmRUIycURSNFF4ekRxbVNLVmx6WFFDdGtCU0w1cG12SjVhdVFSS1UzdlJOWng3R1NuNnN6czQzZHRTMHNFby1zag?oc=5) |
| CyberSecurityNews | Hackers Use Fake Claude Install Guide to Deploy MacSync Stealer and Trojanize Crypto Wallet Apps | [Source Link](https://news.google.com/rss/articles/CBMiZ0FVX3lxTE5TUi1SVTFDcTZZRXBVSUtSQnhUSms4c2s2cXU0dUNsTHpCVmtsZU9XTVkteFBtVHk2VzNjUzg2ZXI1OFlXU1V3MWJGMU5yNjZaMzNIYnlwZ1p5UVR4VFVETFJjTU9oR1XSAWxBVV95cUxQWW5XYlUyYi1wSGxiTGJhYmJRZlZXYUpkcmQwcmVoSldfYkhHRU94aGZ5RnJSU3RiUDB1TXlaLXI2cDdBWmRwUkxtanBQQld0WXlKVDNkd1duX3lXZ3NYWVlBdG8tT0VuS2FoNHk?oc=5) |
| CyberSecurityNews | MacSync Stealer Hides Behind 30+ Domains While Stealing Passwords and Sensitive Mac Data | [Source Link](https://news.google.com/rss/articles/CBMiWkFVX3lxTE8xclphYllRN0dGalpRR2F5N0lBcjNYeXFrX1dFUXlYMjNqTTRCclhlN0ZsQkpvSTlrblliRDNnemVHdTJUU2xPRXdVZFZub0t3V2IwYm5MTHhOd9IBX0FVX3lxTFBDdkExdFd4cGRFeUhSSExsSFFGVjJRdlJsVHVYd1p6NU45NGdHc3A1RUxEQUVXbG94aXE0RUdOQnhyQTExeHI0NklhR0R4dVFaanZOTnpHRk5mREZoclNN?oc=5) |
| TechRadar | Microsoft smothers malware by tracking behavior instead of blocking domains | [Source Link](https://news.google.com/rss/articles/CBMitAFBVV95cUxOYWZac19XU2NLcFV2bDN2SVk4eXN4c1k0VTBCRUEwTDdlYzZfX2lvYmRCa09vRTEzNHllSmdsUXJUektoS0pDM2htdkJrRTVzbXdtQ0lBdWo1VzNoSmNrLUpLLUJYOXpFY2VYX2xLaFdGbE45X1VwQ1dqREZ4OXY4RTM4cTBONlV4NzBWeUEySTB0WlBsbUN6Zktfc0ZlNExtMWtuT1Ywckd3NkN1bTlObFVqei0?oc=5) |
| gbhackers.com | Fake Claude Install Guide Steals Mac Passwords and Turns Trusted Crypto Wallet Apps Into Phishing Traps | [Source Link](https://news.google.com/rss/articles/CBMiZkFVX3lxTE9RcUQwMVNOT3pMWmtYVnRQNTF6dEpoLXpTejRmSlRkOFc1SGtmUzBkZHpWVG8xdVIxM3N2QXdOQ0RHMkUwSEEyYWpOckZSZjltd0VqZERmQWdnalFITXdvamZubHFfQdIBa0FVX3lxTFAzV0ZTUkVEZkJ5MmNySE9EazJXZDlpV3NJWWJhLU1kYVN3b0lNRWlZa1VRMUU3aHFndnVsZ0FHWXBneWVkak5pbFVla0ZwckpwVzZteklyak50QVo5b1ozMXFUYk5Gb0hZcGFJ?oc=5) |
| Microsoft | Hunting MacSync Stealer infrastructure through behavioral pivots | [Source Link](https://news.google.com/rss/articles/CBMivwFBVV95cUxNdll1RHdTam1qRE5halphNkV1X182aU1BYnppbWtMQ2otbkxaOFIxOFZfNTlQbXF3QmRWeUl4M2V6bklZQzZsZ29UVDNWdk93QUhTMW9lLWRwaWcxUTB1cW5MeWdrY0pmYTlHemRIMG0wR2hwcE9EMG1ib3hOMGM2QXJVZThyVVAzQXREc0FmNFRpTkgzY3g3cFRmNTVVV0tpTU0yUkFBcnQ5S1VBWHhGbE5Uc2NMM01rQk5ramc3Yw?oc=5) |
| The Hacker News | Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure | [Source Link](https://news.google.com/rss/articles/CBMigwFBVV95cUxOYjdMdnRrR3ZmejZPSFpsYTdzaVV1ZHBpNWZDeWxsWTBxTGFlN2liZWx3bDNiTTFuUGFWbXBCYjJDU0RmRXBXSXNKMlU3dXM2dGZMZE92N1dTMWt2cTRMZnVTdDRyb0xDMGlXaFRETjZfRGJSVS1pNXpBUzB1ZHhKSTA5OA?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-08-20/microsoft-links-30-rotating-domains-to-macsync-stealer-infrastructure*