Seqrite analyzes MacSync, a macOS MaaS stealer delivered through ClickFix lures and malvertising. The report details its native Mach-O stager, in-memory AppleScript payload, credential theft, persistence, and chunked exfiltration.
Seqrite details Operation QUICSILVER, targeting Myanmar government personnel with a disguised VHD lure and Go backdoor QUICAgent. The malware resolves C2 via Cloudflare Workers and uses QUIC with RC4 encryption; Seqrite assesses a China nexus with moderate confidence.
Seqrite analyzed a GST-themed phishing campaign targeting Indian businesses and taxpayers. Its multi-stage .NET chain concealed payloads in bitmap pixels and delivered Remcos RAT, with fileless execution and persistence techniques.
