Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.
"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.
The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.
Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.
In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.
Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.
"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.
Related news- Kik Hack Tools
- Hack Tools For Mac
- Hacker Tools Mac
- Hack Tools 2019
- Bluetooth Hacking Tools Kali
- Bluetooth Hacking Tools Kali
- Hacker Tools Free
- Pentest Tools Alternative
- Hack Tool Apk
- Hacking Tools Pc
- Hacking Tools Software
- Hacker Tools Windows
- Top Pentest Tools
- Hacking Tools Online
- Free Pentest Tools For Windows
- Underground Hacker Sites
- Pentest Tools Framework
- World No 1 Hacker Software
- Install Pentest Tools Ubuntu
- Hack And Tools
- Free Pentest Tools For Windows
- Pentest Tools Alternative
- Hacker Tools List
- Hacking Tools For Windows 7
- Hackers Toolbox
- Pentest Reporting Tools
- Hacking Tools
- Hacker Tools
- Hacker Tools Github
- Hacking App
- Pentest Tools For Ubuntu
- Pentest Tools Free
- Hacking App
- Black Hat Hacker Tools
- Hacking Tools Free Download
- Hacker Tools For Mac
- Pentest Tools Website
- Hacking Tools Software
- Hacking Tools For Mac
- New Hacker Tools
- Pentest Tools Review
- Hacker Tools 2020
- Hack Tool Apk No Root
- Hack Tools Pc
- Hacker Tools Github
- Pentest Tools Open Source
- Hack Tool Apk No Root
- Bluetooth Hacking Tools Kali
- Hacking Tools For Kali Linux
- Pentest Tools Nmap
- Pentest Tools Android
- Hacker Tools Free Download
- Hacking Tools For Windows 7
- Ethical Hacker Tools
- Hack Tools For Pc
- Hack Tools For Windows
- Nsa Hacker Tools
- Tools 4 Hack
- Hacker Tools Software
- Blackhat Hacker Tools
- Hack Tools 2019
- Hacking App
- Hacker Tools Free
- Hack Tool Apk No Root
- Pentest Reporting Tools
- Pentest Tools Bluekeep
- Hacking Tools Usb
- Black Hat Hacker Tools
- Hack And Tools
- Kik Hack Tools
- Hacker Tools For Windows
- Hacker Tools Online
- Hack Tools For Ubuntu
- Hacker Tools Free
- Hacker Tools Windows
- Best Hacking Tools 2019
- Hacker Tool Kit
- Pentest Tools Linux
- Pentest Tools Website
- Hacking Tools Pc
- Hack Tools For Ubuntu
- Free Pentest Tools For Windows
- Hacking Tools Download
- Hack Tools 2019
- Hacking Tools For Games
- Pentest Tools Find Subdomains
- Pentest Tools
- Pentest Tools Tcp Port Scanner
- Hacker Tools Hardware
- Hacker Tools Windows
- Nsa Hacker Tools
- Hacking Tools Free Download
- Hacking App
- Pentest Tools Review
- Hacker Tools 2019
- Hack Rom Tools
- How To Install Pentest Tools In Ubuntu
- Hacker Tools For Ios
- Hackers Toolbox
- Tools For Hacker
- Hack Tools
- Pentest Tools Download
- Beginner Hacker Tools
- Hacking Tools Name
- Hackers Toolbox
- Hacker Tools Apk
- Pentest Automation Tools
- Hacker Tools Linux
- Hacking Tools Hardware
- Hacker Tools Free
- Ethical Hacker Tools
- Best Pentesting Tools 2018
- Hacker Tools Online
- New Hack Tools
- Hack Website Online Tool
- Pentest Tools Kali Linux
- Pentest Tools Download
- Pentest Automation Tools
- Pentest Tools For Ubuntu
- Easy Hack Tools
- Nsa Hack Tools
- Pentest Tools Find Subdomains
- Hacking Tools Name
- Android Hack Tools Github
- Hacker Tools For Windows
- Hacker Search Tools
- Kik Hack Tools
- Hacker Tools Apk
- Usb Pentest Tools
- Hack Tools Online
- Nsa Hack Tools
- Hacking Tools Hardware
- Pentest Tools Free
- Pentest Tools Find Subdomains
- Pentest Tools For Mac
- Hack Tools For Mac
- Pentest Tools Review
- Hacker Tools For Ios
- Hack Tools
- Hacker Techniques Tools And Incident Handling
- Easy Hack Tools
- Tools 4 Hack
- Usb Pentest Tools
- Hacker Tools 2020
- Hack Tools Github
- Hack App
- Hacker Tools Windows
- Pentest Tools Nmap
- Computer Hacker
- Growth Hacker Tools
- Hacking Tools For Games
- What Is Hacking Tools
- Pentest Tools Nmap
- Hacker Tools 2020
- Pentest Tools Open Source
- Beginner Hacker Tools
- Hacker Tools For Pc
- Pentest Tools
- Hacking Tools Name
- Hacker Tools List
- Hacking Tools Usb
- Hacking Apps
- Growth Hacker Tools
- Pentest Tools For Android
- Hak5 Tools
- Hack Tools For Mac
- Hacker Tools For Ios
- Hack Tools
- Pentest Tools For Ubuntu
- Hacker Tools Online
- Pentest Tools Find Subdomains
- Pentest Tools For Windows
- Hacker Tools 2019
- Hacking Tools Pc
- Hack And Tools
- Android Hack Tools Github
- Hacking Apps
- Pentest Automation Tools
No comments:
Post a Comment