# MacSync malware uses public iCloud calendars to deliver new payloads

> **Open Intelligence Dossier** · First detected: 2026-09-25 18:00 UTC · Category: Technology

## Executive Summary
5 news sources are covering this Technology story right now — PULSE is tracking how fast it spreads.

## Intelligence Brief
"MacSync malware uses public iCloud calendars to deliver new payloads" is generating significant coverage in the Technology category, with 5 articles from 5 distinct sources tracked by PULSE so far.


Outlets currently covering the story include SOC Prime, TechRadar, securelist.com and The Hacker News. PULSE measures a story's velocity from how quickly new articles appear and how many independent newsrooms join the coverage.


This brief was generated by PULSE's extractive engine from coverage metadata only. The latest headlines from every source are listed below; the velocity chart shows how the story is developing in real time.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| SOC Prime | PamStealer Moves to Swift With Server-Side Decryption | [Source Link](https://news.google.com/rss/articles/CBMioAFBVV95cUxPNk1HSkVXalNJN0lIam1RY0RMOXlTZjdRZXg4dmI5NVJiRlBZOFFpdWk4X3JwTHIzc2hMWTJIM0dOdER0dEJLeEQwYm1xRGFnNnphT2t1Sng1cmlsaE1kZnl0a3gwbzZucS1FcXRKQmQyUGl6QU9ON3U4cjc0X2lreWZJbWZmN2J0UmUtWHVBUFlNMFFNaE55bUdpUlc4TDN3?oc=5) |
| TechRadar | This Mac malware is somehow using iCloud calendar invites to try and steal your data | [Source Link](https://news.google.com/rss/articles/CBMiwAFBVV95cUxNQm9mSV9UY1lvcXUyU0dzTmExN3NCanY5cDhrbWh1c0pubWlCV3Vvc2NSbHlIbnJOSS1LeTB5V3d5dXdwdkV5dnNTQVE1NXp5dWFrNEZXUE1fMFdHd3VsMi1zajhKM3p6aXVpWmp1aHBvYXViTDNCTlRqMjlTdFFjUXR1R0lleW4tamliMUYzSUpDSXFhb1dxR2pueFhaMW9naDQ5Sy1ucmdOZVhqcklZVFctYkI2VUM1a1p5MWMzWVo?oc=5) |
| securelist.com | A new version of the MacSync macOS stealer targets crypto enthusiasts and developers | [Source Link](https://news.google.com/rss/articles/CBMiX0FVX3lxTE8yWjY4V0ZnNmRHY0dNdk51Y3lqcmV6N1JjR0RMRWRtc2Z6aXpEWTZVZW5rcGRkeHF4OW9JWERkRlFSUl9QWEpYMmhQem50WlltUEhJRmFnQWhkdW1JcE5z?oc=5) |
| The Hacker News | PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence | [Source Link](https://news.google.com/rss/articles/CBMiggFBVV95cUxOZTlhczE5dXdXYjhNT1pnNHEwT2xvVVh2NUU5Y0M0c0tXMnl2X3dpSlJHd2lpbkZVREwtQXZNaG9LRjNzNHBiZUpYVEstUl9NN2lPZHRJbEZDdlNkQzR3QnRmRTItT0dLcDN6SkxHOFVPemhKZE14VEpJeWtzRUlzdTJR?oc=5) |
| BleepingComputer | MacSync malware uses public iCloud calendars to deliver new payloads | [Source Link](https://news.google.com/rss/articles/CBMitwFBVV95cUxPeTFuSHhOUWhwYWRabUVDWnNoOXpteVNha0tieElqMllmWHprRHZTVERuY1NWLUdHS2pBbUJ6VS1DbXJnNGpoS0hONHV4TktVZ0w4QlgxMmNhNDg1RlY0eUxZMzNoQ2piUWhKRTczOWV3SEQ4SlExTk8wX3VTZEJsZ1FhVl9hZC1MaUFBQ3QyTDdVLWhBUVFFYVRLU1p6ZnRDUFlobjNtTEF2MkxVUmg0YXlVeTdpeGfSAbwBQVVfeXFMT1pyX0hTRDJJbFNLVEktX1psZHlpdkNTTDVVa0lFSXhKQ0NwMXNfZ3pQckdvWkFWTXFzX3YyR3B0a24wbzRsN3JYYUtWbGFhLWtBZjJMQjQxVVNKbk05bktjVGphbzBvVDlmcURMeC1BZHhXUGpjb3NFOEVEOVJndmdYYmhKQkp6Vmk2U0ZwV240M2t6Y0xtZk1mb05) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-09-25/macsync-malware-uses-public-icloud-calendars-to-deliver-new-payloads*