MalwarePublished 20 May 2026Updated 21 May 2026

tlp clear · Maltrail IOC for 2026-05-21

Affects tlp clearSource CIRCL OSINT Feed

TLP:CLEAR, disclosure is not limited

malware

Description

Maltrail IOC for 2026-05-21

Impact

The impact is limited to the presence of malware-related indicators that may signal malicious activity or compromise attempts involving MacSync Stealer. There is no detailed information on exploitation, affected systems, or direct consequences. No known active exploitation or ransomware campaigns are reported.

Defensive guidance

Since this is an IOC report, mitigation involves monitoring for the listed indicators within network traffic and endpoints. Organizations should update their detection tools and threat intelligence feeds accordingly. No vendor advisory or specific mitigation steps are provided.

Summary

The report provides a collection of IOCs related to malware activity identified on 2026-05-21, primarily involving domains and URLs linked to MacSync Stealer. The data originates from the CIRCL OSINT Feed and includes references to GitHub commits and threat intelligence sources. No specific vulnerability or exploit mechanism is described, and no affected software versions are listed. The threat is categorized as medium severity malware activity with no known exploits or patches available.

Indicators of compromise

Domains 5

osx_atomic

cloudpuput.com
whatisbred.com
opclaude.github.io
claudecode-ai.netlify.app
trailblazehealth.com

URLs 6

osx_atomic

https://api.github.com/repos/stamparm/maltrail/commits/2bc3ddf38d56672c64d00ae8b60ab0b1ce73bccc
https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2026-05-20-IOCs-for-MacSync-Stealer-activity.txt
https://api.github.com/repos/stamparm/maltrail/commits/5f29c4eab99633b4917ba263269f81318bbc6cbd
https://x.com/skocherhan/status/2057212577910763960
https://api.github.com/repos/stamparm/maltrail/commits/9f820a7a20cf23d4cac9d7c21f6792a49f86a415
https://x.com/masaomi346/status/2057348200076603519

Community reviews

Loading reviews…