Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.
"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.
The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.
Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.
In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.
Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.
"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.
Related posts
- Pentest Tools Tcp Port Scanner
- Hacking Tools Software
- Hacker
- Pentest Tools Open Source
- Pentest Tools Tcp Port Scanner
- Hack Tools For Mac
- How To Make Hacking Tools
- How To Make Hacking Tools
- Hacker Tools Linux
- Physical Pentest Tools
- Nsa Hack Tools
- Hack Tools For Ubuntu
- Hacker Tools For Pc
- Hacking Tools 2020
- Pentest Tools Download
- Hacker Tools For Mac
- World No 1 Hacker Software
- Hacking App
- Pentest Tools Alternative
- Pentest Tools Github
- Game Hacking
- Hack Tools
- Black Hat Hacker Tools
- Underground Hacker Sites
- Hack Tools 2019
- Hacking Tools Free Download
- Hacking Tools For Games
- Pentest Automation Tools
- Hack Apps
- Hack Tools For Pc
- Hacker Tools Windows
- Hacker Tools
- New Hack Tools
- Best Hacking Tools 2019
- Hack Tool Apk
- Hacking App
- Github Hacking Tools
- Hacking Tools For Games
- Hack Tool Apk No Root
- Blackhat Hacker Tools
- Pentest Box Tools Download
- Hacking Tools For Beginners
- Pentest Tools For Ubuntu
- Hacking Tools For Windows 7
- Hacking Tools For Windows Free Download
- Hacking Tools Download
- Usb Pentest Tools
- Game Hacking
- Hacker Tools Apk
- Nsa Hacker Tools
- Hackers Toolbox
- Android Hack Tools Github
- Best Hacking Tools 2020
- Hack Apps
- Hacker Tools
- Hacker Tools Software
- Tools 4 Hack
- Pentest Reporting Tools
- Hacking Tools Software
- Android Hack Tools Github
- Hacking Tools For Windows 7
- Hacker Tools Apk
- Hacker Tools Apk Download
- Pentest Tools Linux
- Hacker Hardware Tools
- Easy Hack Tools
- Hacker Tool Kit
- Computer Hacker
- Hacker Tools For Windows
- Hacks And Tools
- Hacking Apps
- Hacker Tools Mac
- Pentest Tools For Ubuntu
- Hacking Tools Usb
- Pentest Tools Android
- Hacking Tools Github
- Hack Tools For Windows
- Hacker Tools List
- Hackers Toolbox
- Hacker Security Tools
- Hacking Tools Software
- Hacker Tools Apk Download
- Hacker
- How To Make Hacking Tools
- Pentest Tools Bluekeep
- How To Make Hacking Tools
- Hacking App
- Hacking Tools Mac
- Hacking Tools Name
- Hack Tools
- Pentest Tools Open Source
- Game Hacking
- Hacking Tools For Beginners
- Pentest Tools Linux
- What Are Hacking Tools
- Hack Rom Tools
- Hacking Tools 2020
- Underground Hacker Sites
- Hack Tools For Windows
- Tools For Hacker
- Game Hacking
- Pentest Tools Tcp Port Scanner
- Hacking Tools Pc
- Hacks And Tools
- Hacking Tools For Mac
- Pentest Tools Open Source
- Hacker Tools Free
- Hacker Tools 2020
- Pentest Tools For Windows
- Pentest Tools Website Vulnerability
- Pentest Tools Alternative
- Hacking Tools Usb
- Pentest Tools Framework
- Hacking Apps
- Hack Tools For Games
- Tools 4 Hack
- Hacking Tools Online
- Hack Apps
No comments:
Post a Comment