
Phorion Threat Report: a backdoored Cursor extension was used to deploy the Paradox Stealer infostealer into macOS developer workflows.
The post breaks down the full infection chain, detection opportunities and why IDE extensions have become a reliable point of initial access.
phorion.io/blog/macos-par…

English




