New Variant Of UpdateAgent Malware Infects Mac Computers With Adware

 Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."

The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.

"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.

The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.

Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.

In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.

Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.

"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.

Related articles

1. Hacking Tools For Mac
2. Hacking Tools For Mac
3. Black Hat Hacker Tools
4. Hack Tools For Windows
5. Hacking Tools For Beginners
6. Pentest Tools Apk
7. Hacker Hardware Tools
8. Hack App
9. Hacking Tools For Windows
10. Hack Tools Mac
11. How To Install Pentest Tools In Ubuntu
12. Hacking Tools
13. Android Hack Tools Github
14. Hacker Tools Free
15. Hack Tools For Mac
16. Hacking Tools 2019
17. Black Hat Hacker Tools
18. Hacker Tools For Mac
19. Hak5 Tools
20. Hacker Tools Software
21. Pentest Tools Bluekeep
22. Github Hacking Tools
23. Pentest Tools List
24. How To Hack
25. Hacker Tools Apk Download
26. Hacking Tools Download
27. Game Hacking
28. Hack Tools
29. Pentest Tools Framework
30. Hacker Tools For Pc
31. Black Hat Hacker Tools
32. Pentest Tools Subdomain
33. Hacker Tools Linux
34. Pentest Tools Download
35. Hacker Tools Apk
36. Hack Tool Apk
37. Hacking Tools Name
38. Hackrf Tools
39. Easy Hack Tools
40. Hack Apps
41. Black Hat Hacker Tools
42. Install Pentest Tools Ubuntu
43. Hacker Tools Online
44. Pentest Tools Android
45. Pentest Tools Subdomain
46. Hacker Tools For Windows
47. Hacking Tools Free Download
48. Hacker Tools Free Download
49. Hacker Tools Github
50. Bluetooth Hacking Tools Kali
51. Hacks And Tools
52. Computer Hacker
53. Nsa Hacker Tools
54. Pentest Tools Windows
55. Pentest Tools For Android
56. Hack Tools Online
57. Hacking Tools For Mac
58. Pentest Tools Website Vulnerability
59. Hack Apps
60. Pentest Tools For Ubuntu
61. Hack Tools For Windows
62. Hack Tools For Ubuntu
63. Hacking Tools Windows 10
64. Pentest Tools Subdomain
65. Pentest Automation Tools
66. Usb Pentest Tools
67. Hack Tools 2019
68. Hacking Tools Kit
69. Hacker Tools Free
70. Wifi Hacker Tools For Windows
71. Pentest Tools Url Fuzzer
72. Hack Tools Mac
73. Hacker Tools Free Download
74. Pentest Automation Tools
75. Github Hacking Tools
76. Hacker Tools Github
77. Pentest Tools Bluekeep
78. Hacker Tools For Mac
79. Pentest Recon Tools
80. Hacker Tools Windows
81. Hack Tools
82. Hacking Tools For Windows 7
83. Hacker Tools Hardware