Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.
"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.
The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.
Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.
In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.
Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.
"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.
Related posts
- Hacker
- Pentest Tools Android
- Hack Apps
- Pentest Tools Subdomain
- Install Pentest Tools Ubuntu
- Hacking Tools Download
- Install Pentest Tools Ubuntu
- Pentest Tools Framework
- Pentest Tools Url Fuzzer
- How To Hack
- Hackrf Tools
- Hacker Hardware Tools
- Hack Tools For Mac
- Hack Tools For Windows
- Best Hacking Tools 2020
- Pentest Recon Tools
- Hacker Tools List
- Hacking Tools Windows 10
- Hacker Tools Free
- Hacker Tools Hardware
- Pentest Reporting Tools
- Tools Used For Hacking
- Pentest Tools For Ubuntu
- Pentest Reporting Tools
- Pentest Tools Alternative
- New Hack Tools
- Hacker Tool Kit
- Hacking Tools For Games
- Hacker Tools Free Download
- Pentest Tools Windows
- Hack And Tools
- Hack And Tools
- Hacker Tools Free Download
- Android Hack Tools Github
- Android Hack Tools Github
- Pentest Tools Find Subdomains
- Hacking Tools For Kali Linux
- Hacking Tools Usb
- Hacking Tools For Windows 7
- Hack Tool Apk
- How To Hack
- Hacker Tools For Pc
- Game Hacking
- What Are Hacking Tools
- Computer Hacker
- Hacking Tools For Windows
- Hacker Tools 2019
- Hacking App
- Nsa Hack Tools Download
- Hacker Tools 2020
- Pentest Tools Online
- Hack App
- Hacking Tools Free Download
- Pentest Tools Alternative
- How To Hack
- Hacking Tools Windows
- Hacks And Tools
- Hack Tool Apk No Root
- Game Hacking
- Hacker Tools List
- Hacking Tools Pc
- Hackrf Tools
- Hacking Tools And Software
- New Hacker Tools
- Pentest Tools Subdomain
- Hacking Tools For Windows 7
- Pentest Tools Alternative
- Pentest Tools Github
- Hack Website Online Tool
- Pentest Tools Url Fuzzer
- Pentest Tools Review
- Top Pentest Tools
- Pentest Tools Linux
- Hack Tools For Pc
- Hacking Tools 2020
- Hack Tool Apk
- Hack And Tools
- Hacker Tools For Windows
- Easy Hack Tools
- Pentest Tools Website Vulnerability
- Pentest Tools Url Fuzzer
- Hacking Tools For Games
- Hacker Tools 2019
- Pentest Tools Website Vulnerability
- Hack Tools Online
- Pentest Tools Subdomain
- Ethical Hacker Tools
- Easy Hack Tools
- Pentest Tools Framework
- Pentest Tools Kali Linux
- Hack Tools Online
- Tools 4 Hack
- Tools Used For Hacking
- Hack Tools
- Hacker Tools Mac
- How To Make Hacking Tools
- Pentest Tools Nmap
- Hack Tools For Windows
- Pentest Tools Windows
- Best Hacking Tools 2019
- Hacking Tools For Mac
- Hacking Tools For Beginners
- Pentest Tools For Windows
- Hacking Tools Name
- Growth Hacker Tools
- Wifi Hacker Tools For Windows
- Hacking Tools Software
- Tools 4 Hack
- Pentest Tools Find Subdomains
- Android Hack Tools Github
- Pentest Tools Android
- Hacking Tools For Games
- Pentest Tools Framework
- Hacker Tools Mac
- Hacking Tools 2019
- Hack Tools For Pc
- Hacking Tools Windows
- Hacks And Tools
- Hacking Tools For Windows 7
- Hacking Tools Online
- Pentest Reporting Tools
- Hack Tools Pc
- Android Hack Tools Github
- Hacker Tools Apk Download
- Pentest Tools List
- Github Hacking Tools
- World No 1 Hacker Software
- Hacker Tools Free Download
- Wifi Hacker Tools For Windows
- Hacking Tools Download
- Nsa Hack Tools Download
- Hacker Tools
- Pentest Tools Framework
- Free Pentest Tools For Windows
- Hacker Search Tools
- Hacker Tools For Ios
- Bluetooth Hacking Tools Kali
- Hack Tool Apk
- Hack Tool Apk
- Hacker Search Tools
- Pentest Tools Website
- Hacker Tools
- Hacking Tools For Pc
- Hack Tool Apk
- Hacking Tools And Software
- Hacker Tools Hardware
- Hacking Tools For Windows 7
- Hacking Tools Online
No comments:
Post a Comment