Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.
"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.
The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.
Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.
In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.
Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.
"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.
More articles
- Hacker Tools Windows
- Github Hacking Tools
- Hacker Tools Free Download
- Hack And Tools
- Hacking Apps
- New Hack Tools
- Hack Website Online Tool
- Hacking Tools Windows 10
- Hacking Tools Name
- Hack Tools 2019
- Hacker Tools 2019
- Nsa Hack Tools
- Pentest Tools Open Source
- Hacker Tools Free
- Pentest Tools Kali Linux
- Pentest Tools Free
- Hacker Tools Apk Download
- Hacker Tools 2020
- Hacking Tools Software
- How To Make Hacking Tools
- Easy Hack Tools
- Hack App
- Hacking Tools Usb
- Hacking Tools Kit
- Hacking Tools Pc
- Hacking Tools For Kali Linux
- Pentest Tools For Android
- Hack Apps
- Hack Tools
- Hack Tools Mac
- Nsa Hacker Tools
- Hack Tools
- Beginner Hacker Tools
- Pentest Tools For Mac
- Hacker Hardware Tools
- Hack Tools Github
- Beginner Hacker Tools
- Hacker Tools 2020
- How To Hack
- Usb Pentest Tools
- Hacker Tools Free Download
- Hacker Hardware Tools
- Pentest Tools Windows
- Hackers Toolbox
- Pentest Tools For Windows
- Blackhat Hacker Tools
- Bluetooth Hacking Tools Kali
- Hack Tool Apk
- Hacker Techniques Tools And Incident Handling
- Top Pentest Tools
- Hacking Tools Pc
- Hacking Tools Free Download
- Android Hack Tools Github
- Hack Tools Online
- Hacks And Tools
- Hacker Tool Kit
- Pentest Recon Tools
- Black Hat Hacker Tools
- Pentest Tools List
- Computer Hacker
- Hacking Tools For Pc
- Hacker Tools Github
- Pentest Tools Port Scanner
- Blackhat Hacker Tools
- Hak5 Tools
- Hacker Tools 2019
- Hacker Tools
- Hacking Tools Name
- Hacking Tools Windows
- Hacking Tools For Windows
- Pentest Tools List
- Pentest Tools Find Subdomains
- Hack Tools For Mac
- Hack App
- Hacking Tools Kit
- Hack Tools Github
- Blackhat Hacker Tools
- Hacker Tools For Pc
- Hacking Tools For Games
- Pentest Tools Download
- Computer Hacker
- Pentest Tools Subdomain
- Hacking Apps
- Pentest Tools Website Vulnerability
- Game Hacking
- Pentest Automation Tools
- Pentest Tools Find Subdomains
- Hack Website Online Tool
- New Hack Tools
- How To Make Hacking Tools
- How To Make Hacking Tools
- Computer Hacker
- Hacker Tools Windows
- Hacking Tools Software
- Android Hack Tools Github
- Hack Tools
- Hacker Tools For Pc
- Pentest Tools Website
- Hacker Hardware Tools
- Pentest Tools Free
- Game Hacking
- Hacker Techniques Tools And Incident Handling
- Hacker Tools For Mac
- Game Hacking
- Hack Tool Apk No Root
- Pentest Tools Windows
- Hackers Toolbox
- Free Pentest Tools For Windows
- Pentest Tools For Android
- Hack Tools
- Hacking Tools For Mac
- Hacker Tools For Pc
- Pentest Tools Review
- Hacking Tools For Mac
- Hacking Tools Hardware
- Pentest Tools Linux
- Hacking Tools Mac
- Game Hacking
- Termux Hacking Tools 2019
- Hacker Tools For Pc
- Hacking Tools For Beginners
- Bluetooth Hacking Tools Kali
- Hack Rom Tools
- Hack Tools For Mac
- Hack Tools For Pc
- Pentest Tools List
- Hackers Toolbox
- Pentest Reporting Tools
- Install Pentest Tools Ubuntu
- Hacker Security Tools
- Pentest Tools Kali Linux
- Hack Tools Github
- Pentest Tools Alternative
- Pentest Tools Free
- Pentest Box Tools Download
- Hacking Tools Hardware
- Hacking Tools For Beginners
- Pentest Tools Android
- Hacking Tools 2020
- Hack Tools For Ubuntu
- Hacking Tools For Kali Linux
- Hacker Tools Free
- Pentest Tools For Mac
- Hackrf Tools
- Hack Tools Online
- Hacker Tools Online
- Pentest Tools Download
- Hacking Tools Online
- Nsa Hack Tools
- Kik Hack Tools
- Hacker Tools Apk Download
- Hack Apps
- Hacking Tools Download
- Hacking Tools For Windows Free Download
- Hack Tools 2019
- Pentest Tools List
- Hacker Techniques Tools And Incident Handling
No comments:
Post a Comment