CloudSyncD: a two-stage macOS backdoor that hides a phished password in zero-width Unicode

Jamf Threat Labs details CloudSyncD, a fake macOS Zoom installer that hides a phished password using invisible zero-width Unicode characters.