A recent malware campaign attributed to unidentified threat actors, dubbed "Dark Partners," has been observed delivering malicious payloads targeting Windows and MacOS users. The campaign utilizes a loader known as "PayDay Loader," which primarily facilitates the distribution of infostealers, including the notorious Poseidon Stealer for MacOS. The origin of this malware can be traced back to impersonated websites mimicking well-known AI and VPN services, with notable emphasis on fostering user trust through familiar brands.