New Variant Of UpdateAgent Malware Infects Mac Computers With Adware

 Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."

The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.

"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.

The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.

Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.

In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.

Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.

"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.

Related word

1. World No 1 Hacker Software
2. Hack Tools Download
3. Pentest Tools Download
4. Hacking Tools For Windows
5. Hacker Tools List
6. Hacking Tools Usb
7. Blackhat Hacker Tools
8. Hacker Hardware Tools
9. Hacker Tools List
10. Hacking Tools For Pc
11. Pentest Tools Tcp Port Scanner
12. Pentest Tools Windows
13. How To Hack
14. Ethical Hacker Tools
15. Hacker Tools Online
16. Hack Tools
17. Hacking Tools Pc
18. Tools 4 Hack
19. Hacking Tools Github
20. Pentest Tools Nmap
21. Free Pentest Tools For Windows
22. Hacking Tools Free Download
23. Hacker
24. Kik Hack Tools
25. Free Pentest Tools For Windows
26. Pentest Tools Website
27. Hacking App
28. Pentest Tools Online
29. Kik Hack Tools
30. Underground Hacker Sites
31. Hacking Tools For Games
32. Hack Tool Apk
33. Pentest Recon Tools
34. Best Hacking Tools 2019
35. Hacker Tools For Ios
36. Pentest Tools Website Vulnerability
37. Hack Tool Apk No Root
38. Pentest Tools Nmap
39. Hack Tools For Games
40. Top Pentest Tools
41. Pentest Tools Kali Linux
42. Pentest Recon Tools
43. Pentest Tools Find Subdomains
44. Hack And Tools
45. Beginner Hacker Tools
46. Hacker Tools Hardware
47. Hacker Tools Free
48. New Hack Tools
49. Best Pentesting Tools 2018
50. Hack App
51. Pentest Tools Website Vulnerability
52. Hacking Tools For Kali Linux
53. Hacking Tools Kit
54. New Hack Tools