New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper

Cybersecurity researchers have identified a new variant of the MacSync macOS information stealer that employs a sophisticated delivery method by masquerading as a legitimate messaging app installer through a digitally signed and notarized Swift application, effectively bypassing Apple's Gatekeeper security checks. Unlike previous versions that relied on manual or click-based infection techniques, this variant leverages the trust associated with notarized applications to facilitate stealthy distribution and execution on targeted systems.