Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.
"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.
The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.
Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.
In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.
Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.
"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.
Related news
- Kik Hack Tools
- Hacker Tools For Mac
- Hacking Tools For Windows 7
- Kik Hack Tools
- Hackrf Tools
- Hacker Search Tools
- How To Hack
- Hack Tools For Windows
- Tools For Hacker
- Hackrf Tools
- Beginner Hacker Tools
- Hacking App
- Hacking Tools Free Download
- Hacking Tools Online
- Hacking Tools For Games
- Hacker Search Tools
- Hack Tool Apk No Root
- Pentest Tools
- Hacker Tools Free Download
- Hack Apps
- What Is Hacking Tools
- Hacker Tools Free Download
- Pentest Tools Nmap
- Nsa Hacker Tools
- Black Hat Hacker Tools
- Hacking Tools For Windows Free Download
- Physical Pentest Tools
- Hack Tools For Pc
- Hacker Tools Github
- Hacking Tools Windows
- Hacking App
- Hacking Tools Download
- How To Install Pentest Tools In Ubuntu
- Hack Tools 2019
- Hak5 Tools
- World No 1 Hacker Software
- Hacking Tools For Beginners
- Free Pentest Tools For Windows
- Ethical Hacker Tools
- New Hack Tools
- Hacking Apps
- Pentest Automation Tools
- Pentest Tools Github
- Hacker Tools Mac
- Hacker Tools Github
- Pentest Tools Website
- Pentest Tools Find Subdomains
- Pentest Tools Windows
- Hacker Tools Windows
- Hack Rom Tools
- New Hacker Tools
- How To Hack
- Hacking Tools For Windows Free Download
- Hacking Tools Kit
- Hacker Tools For Windows
- Pentest Recon Tools
- Hacker Tools For Ios
- Hacker Tools List
- Hacking App
- Nsa Hack Tools Download
- Github Hacking Tools
- Hacker Tools
- Hack Tools
- Hack Apps
- Hack Apps
- Hacking Tools Mac
- Pentest Tools For Ubuntu
- Hacking Tools For Windows
- Pentest Tools For Mac
- Hacker Tools Linux
- Hacking Tools Free Download
- Pentest Tools Open Source
- Pentest Tools Nmap
- Hacking Tools Github
- Hacking Tools 2020
- Nsa Hack Tools Download
- Pentest Tools Tcp Port Scanner
- World No 1 Hacker Software
- Pentest Tools Kali Linux
- Hack Website Online Tool
- Hack Tools For Mac
- Hacking Tools For Beginners
- Hack Tools For Windows
- Hack App
- Pentest Tools Framework
- Hacking Tools For Mac
- Hacking Tools For Beginners
- How To Install Pentest Tools In Ubuntu
- Hacking Tools Windows 10
- Pentest Tools Online
- Pentest Automation Tools
- Hacker Tools Apk
- Pentest Tools Nmap
- Hacker Search Tools
- Pentest Tools Linux
- Hack Tools For Games
- Hacker Tools For Mac
- Hack And Tools
- Hacking Tools Github
- Hacking App
- Hack Tools For Ubuntu
- Hacking Tools For Windows
- Hack Tools 2019
- Pentest Box Tools Download
- Ethical Hacker Tools
- Hacking Tools Windows 10
- World No 1 Hacker Software
- Underground Hacker Sites
- Pentest Tools Alternative
- How To Make Hacking Tools
- Hack Tool Apk No Root
- Hacker Tools Hardware
- Hack Tools For Windows
- Beginner Hacker Tools
- Hacker Tools Windows
- Blackhat Hacker Tools
- Hacking Tools Usb
- Pentest Box Tools Download
- Hack Tools Mac
- Best Hacking Tools 2020
- Hacking Tools For Kali Linux
- Hacker Tools Software
- Hacker
- Hacking Tools For Pc
- Android Hack Tools Github
- Hacker Tools Free
- Android Hack Tools Github
- Hacker Tools
- Hacking Tools For Mac
- Pentest Tools Find Subdomains
- Hacking Tools Mac
- Pentest Tools Windows
- Pentest Tools Alternative
- Hacker Tools List
- Hack Apps
- Pentest Tools Windows
- What Is Hacking Tools
- Install Pentest Tools Ubuntu
- Hacking Tools Windows 10
- Hacking Tools For Kali Linux
- Hacker Search Tools
- Github Hacking Tools
0 comments: on "New Variant Of UpdateAgent Malware Infects Mac Computers With Adware"
Post a Comment