Pavlo Kot

Jamf uncovers fake Zoom installer using invisible Unicode to steal macOS passwords

Jamf uncovers fake Zoom installer using invisible Unicode to steal macOS passwords
Jamf finds fake Zoom installer backdoor

Jamf discovered a fake Zoom installer that uses invisible Unicode characters to hide a stolen macOS password within a configuration file.

The technique allows the CloudSyncD process to utilize the hidden password once, gaining elevated access to launch a backdoor on the affected device.

Jamf recently became a Visionary Sponsor of the Mac Admins Foundation Grant Program to help more administrators attend global events, according to a company statement. At the JNUC keynote, CEO Beth Tschida announced a new AI diagnostic assistant and API upgrades, as detailed in a previous update. The company continues to expand its security and support offerings for macOS users.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.