Fake Zoom installer tricks Mac users into bypassing Gatekeeper

Jamf has discovered a fake Zoom installer for Macs that persuades users to bypass Apple's Gatekeeper malware protection, 9to5Mac reported. The installer installs Zoom alongside CloudSyncD, an information stealer that records user-entered data and sends it to an attacker's server. The disk image resembles an ordinary installer, but its background instructs users to open Privacy & Security settings, select Open Anyway and enter their administrator password. That process overrides the protection that normally blocks apps Apple has not notarized. Once installed, the malware can transmit captured data as frequently as every eight seconds.