{"schema":"hottub-news/story/v1","story":"st_lpylx574o3ftswgfp4mq","title":"安全公司曝光新型 macOS 恶意木马 CloudSyncD，通过伪装成 Zoom 安装程序传播","title_en":"Security company exposes new macOS malware CloudSyncD, spreading by disguising as Zoom installer","outlets":3,"brief":null,"page":"https://hottub.news/stories/jamf-threat-labs-identifies-cloudsyncd-new-malware-that-attacks-macos-lpylx574o3","count":3,"items":[{"id":"n_76xcyj5tuxz2o3mhxm6a","seq":1318460,"kind":"article","title":"安全公司曝光新型 macOS 恶意木马 CloudSyncD，通过伪装成 Zoom 安装程序传播","title_en":"Security company exposes new macOS malware CloudSyncD, spreading by disguising as Zoom installer","url":"https://www.ithome.com/1/009/334.htm","summary":"IT之家 10 月 2 日消息，安全公司 Jamf Threat Labs 发文，透露业界目前出现一种名为 CloudSyncD 的新型 macOS 恶意木马。该木马主要伪装成 Zoom 会议软件的安装程序，通过所谓的“安装说明”诱导用户关闭 macOS 内置的 Gatekeeper 安全机制、输入管理员密码。一旦用户按照相应“安装说明”步骤操作，攻击者便可以在 Mac 上建立隐藏后门。 Jamf Threat Labs 表示，黑客主要利用山寨网站传播 CloudSyncD 恶意木马，相应钓鱼安装程序界面看起来与普通 Mac 安装程序非常相似， 异常点主要在于背景图片，其中列出了一系列所谓的“安装步骤” 。按照这些提示，用户需要打开“系统设置”，进入“隐私与安全性”，找到相关应用后点击“仍要打开（Open Anyway）”，随后输入 Mac 管理员密码。 在用户完成操作后，恶意安装程序还会弹出一个伪造的授权窗口，要求再次输入管理员密码。CloudSyncD 会将输入的密码与当前 Mac…","published":"2026-10-02T10:04:50Z","seen":"2026-10-02T10:09:49Z","lang":"zh","country":"CN","source":{"id":"kite-ithome-com-f1cdd0","name":"ithome.com","domain":"ithome.com","outlet":{"wikidata":"Q28413779","name":"IThome","type":"website","country":"CN","designations":["website"]}},"via":"kite-ithome-com-f1cdd0","story":"st_lpylx574o3ftswgfp4mq","category":"science-technology","category_p":0.8100000023841858,"sentiment":"negative","tone":-0.7400000095367432,"political":0.07000000029802322},{"id":"n_i2eqygj7w6bfs2yqn2ka","seq":1042764,"kind":"article","title":"Jamf Threat Labs identifies CloudSyncD, new malware that attacks macOS","url":"https://www.mactech.com/2026/09/30/jamf-threat-labs-identifies-cloudsyncd-new-malware-that-attacks-macos","published":"2026-09-30T18:19:00Z","seen":"2026-10-01T03:15:19Z","lang":"en","source":{"id":"mactech.com","name":"mactech.com","domain":"mactech.com","outlet":{"wikidata":"Q6722137","name":"MacTech","type":"magazine","designations":["magazine"]}},"via":"gdelt-gkg-english","topics":["business","technology","economy"],"authors":["Dennis Sellers"],"entities":[{"id":"Q14116","name":"macOS","type":"other"}],"story":"st_lpylx574o3ftswgfp4mq","category":"science-technology","category_p":0.8399999737739563,"sentiment":"negative","tone":-0.800000011920929,"political":0.07999999821186066},{"id":"n_lpylx574o3ftswgfp4mq","seq":968205,"kind":"article","title":"Jamf Threat Labs identifies CloudSyncD, new malware that attacks macOS","url":"https://appleworld.today/2026/09/jamf-threat-labs-identifies-cloudsyncd-new-malware-that-attacks-macos","summary":"Jamf Threat Labs has posted a report on CloudSyncD, new malware that attacks macOS.","published":"2026-09-30T17:39:56Z","seen":"2026-09-30T17:41:21Z","lang":"en","source":{"id":"kite-appleworld-today-062b11","name":"appleworld.today","domain":"appleworld.today"},"via":"kite-appleworld-today-062b11","topics":["apple","news"],"authors":["Dennis Sellers"],"entities":[{"id":"Q14116","name":"macOS","type":"other"}],"story":"st_lpylx574o3ftswgfp4mq","category":"science-technology","category_p":0.8399999737739563,"sentiment":"negative","tone":-0.7200000286102295,"political":0.07999999821186066}]}