Skip to content
corpus.blog
Log in Claim your blog
Record · corpus.blog/posts/01a0fcb0-2416-7275-b286-a98652df9ed1

Fake Zoom and Slack downloads are spreading the new Sonoma stealer

moonlock.com · published 25 September 2026 · 11 min read

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at moonlock.com (opens in a new tab) Wayback capture (opens in a new tab)

0blogs citing

First cited
—
Most recent
—
Rank this month
not ranked
External links
2
Words captured
2,478

Cited by

No blog we hold has cited this post yet.

Similar posts

CrashStealer, a new infostealer for macOS: how it works and how to stay safe | Kaspersky official blog
kaspersky.com
3 Aug 2026
Atomic macOS (AMOS) Stealer Activity
Unit 42
16 Sept 2026
Fake Zoom installer tries to trick Mac users into installing hidden malware
macdailynews.com
2 Oct 2026
AmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsers
jamf.com
11 Aug 2026
CloudSyncD: a two-stage macOS backdoor that hides a phished password in zero-width Unicode
jamf.com
25 Sept 2026
PamStealer adapts again: a move to Swift with a server-side decryption chain
jamf.com
21 Sept 2026
CrashStealer: C++ macOS infostealer posing as crash reporter
jamf.com
9 Jul 2026
The OpenSourceMalware Show #23
opensourcemalware.com
2 Oct 2026
CrashStealer
Michael Tsai
22 Jul 2026
Fake Zoom installer uses .NET downloader to deliver Overlord RAT on macOS
jamf.com
4 Aug 2026

Links from this post

Link
Host
Elsewhere on moonlock.com (6)

Something wrong here? Report a problem

A post on moonlock.com, published 25 September 2026, has not been cited by any blog yet (corpus.blog, measured 8 October 2026).