New Variant Of UpdateAgent Malware Infects Mac Computers With Adware

 Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."

The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.

"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.

The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.

Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.

In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.

Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.

"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.

More info

1. Pentest Tools
2. Hacker Tools For Ios
3. Hacking Tools Windows 10
4. How To Hack
5. Growth Hacker Tools
6. Pentest Tools Subdomain
7. Hacker Tools Linux
8. Hack Tool Apk
9. Pentest Tools Download
10. Hack Tools For Mac
11. Hacker Tools List
12. Termux Hacking Tools 2019
13. World No 1 Hacker Software
14. Nsa Hacker Tools
15. Hacker Tools For Mac
16. Pentest Tools Kali Linux
17. Hack Tools Github
18. Pentest Tools Tcp Port Scanner
19. Hack Tools For Windows
20. Hacking Tools Software
21. Hack Tools Online
22. Pentest Tools Website
23. Blackhat Hacker Tools
24. Easy Hack Tools
25. Pentest Tools For Windows
26. Hacking Tools 2020
27. Pentest Tools Android
28. Tools 4 Hack
29. Pentest Automation Tools
30. Hacking Tools For Pc
31. Hacking Tools Hardware
32. Hacker Techniques Tools And Incident Handling
33. Ethical Hacker Tools
34. Nsa Hacker Tools
35. Pentest Tools Android
36. Hack Tools For Ubuntu
37. World No 1 Hacker Software
38. Hacker Tools Windows
39. Pentest Tools Url Fuzzer
40. Hacker Tools 2020
41. Hacker Tools
42. Hack And Tools
43. Hack Tools Pc
44. Hacking Tools Name
45. Hack Tools Pc
46. Best Hacking Tools 2020
47. Top Pentest Tools
48. Pentest Reporting Tools
49. Best Hacking Tools 2020
50. Hack Tools For Windows
51. Hacker Tools For Pc