macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor

A malicious installer posing as a Zoom installer is targeting macOS users, carrying a backdoor called CloudSyncD. The dropper contains a complete universal Mach-O file, which is approximately 756 KB in size, and extracts it when run. This backdoor is delivered to users through the fake installer. The malware is designed to be executed at runtime, allowing it to carry out its malicious activities. The CloudSyncD backdoor is a significant threat to macOS users who may inadvertently download the fake Zoom installer. The malware's ability to extract and execute its payload at runtime makes it a notable concern for user security.