Jamf

Jamf finds fake Zoom Mac installer that tricks users into bypassing Gatekeeper

Security firm Jamf identified malware dubbed CloudSyncD distributed as a fake Zoom installer for Mac. The disk image mimics a normal installer but includes a background image with step-by-step instructions guiding victims through System Settings to manually override Apple's Gatekeeper protection. Once approved, it installs the real Zoom app alongside an infostealer that sends captured user data to attackers' servers as often as every eight seconds.