{"id":28632,"date":"2026-10-02T16:55:43","date_gmt":"2026-10-02T14:55:43","guid":{"rendered":"https:\/\/www.show.it\/macos-users-targeted-by-fake-zoom-installer-carrying-cloudsyncd-backdoor\/"},"modified":"2026-10-02T16:55:43","modified_gmt":"2026-10-02T14:55:43","slug":"macos-users-targeted-by-fake-zoom-installer-carrying-cloudsyncd-backdoor","status":"publish","type":"post","link":"https:\/\/www.show.it\/en\/macos-users-targeted-by-fake-zoom-installer-carrying-cloudsyncd-backdoor\/","title":{"rendered":"macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor"},"content":{"rendered":"<p>The dropper \u201ccarries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime.<\/p>\n<p>The post <a href=\"https:\/\/www.securityweek.com\/macos-users-targeted-by-fake-zoom-installer-carrying-cloudsyncd-backdoor\/\">macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor<\/a> appeared first on <a href=\"https:\/\/www.securityweek.com\/\">SecurityWeek<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The dropper \u201ccarries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime. The post macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor appeared first on SecurityWeek.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[748,80],"tags":[],"class_list":["post-28632","post","type-post","status-publish","format-standard","hentry","category-macos","category-malware-threats"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/posts\/28632","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/comments?post=28632"}],"version-history":[{"count":0,"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/posts\/28632\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/media?parent=28632"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/categories?post=28632"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/tags?post=28632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}