IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE7 IOCs

MacSync: The Evasive macOS Stealer Exploiting ClickFix Lures

SE
Seqrite
Published September 8, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYSandwormINFRASTRUCTUREunknownCAPABILITYLummaStealcVidarVICTIMunknown
Adversary(1)
Infrastructure
Capability(3)
Victim

Indicators of Compromise

Indicators of Compromise7

TypeIndicatorConfidenceScoreFirst Seen
MD5de62a2f47d1c7dec2997f931a050a615
file-hashintel-blogmalware
Medium
53
Sep 8, 26
SHA256c4f70f37daae63fe47b0c92adf006f8cf50b6c522ad572a4014275cf979013a0
file-hashintel-blogmalware
Medium
53
Sep 8, 26
SHA1d182eb7cba0ffa42d770d7b0d3499e49f24163a2
file-hashintel-blogmalware
Medium
53
Sep 8, 26
SHA256d182eb7cba0ffa42d770d7b0d3499e49f24163a2662494ae615713c5f04b5260
file-hashintel-blogmalware
Medium
53
Sep 8, 26
SHA2569ff32f7c0108e9d27a3b491edf04827b6ca025f44db68aeadc44eeb97c9aab11
file-hashintel-blogmalware
Medium
53
Sep 8, 26
MD59678f71ea4cccbc3d511dc8d7f24b113
file-hashintel-blogmalware
Medium
53
Sep 8, 26
SHA159508d071661ea70fa5fcbe6f9e2fb72506e57df
file-hashintel-blogmalware
Medium
53
Sep 8, 26

IOC Relationship Graph

IOC Relationship Graph7 total IOCs
MD5SHA256SHA1
SHA2563MD52SHA12Actors1Malware3REPORTMacSync: The Evasive macOSSandwormLummaStealcVidar
scroll to zoom · drag to pan · click IOC to open