OTX Threat: Inside ICMacOS: From an Infostealer to a Persistent RAT

ICMacOS (Icarus macOS) is a newly identified macOS Malware-as-a-Service stealer actively marketed since September 2026 by the Russian-speaking actor GlowComa on underground forums. The malware targets macOS systems running Sierra through current versions on both Intel and Apple Silicon architectures. Initially designed as a credential stealer, it rapidly evolved into a persistent remote access tro