Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.
"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.
The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.
Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.
In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.
Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.
"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.
Continue reading- What Are Hacking Tools
- Hacking Tools Mac
- Hacking Tools For Windows Free Download
- Hacking Tools Usb
- Pentest Tools Android
- Hacking Tools Free Download
- Hacker Search Tools
- Install Pentest Tools Ubuntu
- Github Hacking Tools
- Github Hacking Tools
- Pentest Tools Bluekeep
- Underground Hacker Sites
- Hack Tools 2019
- Kik Hack Tools
- Hacks And Tools
- Hacking Tools Hardware
- Pentest Tools Subdomain
- Usb Pentest Tools
- Best Hacking Tools 2020
- Hacking Tools For Kali Linux
- Hacker Security Tools
- Underground Hacker Sites
- Hacker Tools 2020
- Pentest Tools Bluekeep
- Pentest Tools Tcp Port Scanner
- Hack Tools For Games
- Pentest Tools For Mac
- Pentest Tools For Ubuntu
- Pentest Tools Online
- Hacker Tools Apk Download
- Tools Used For Hacking
- Hack Tools For Mac
- Hacker Tools 2020
- Hacker Tools Free Download
- Hacker Security Tools
- Hacking Tools For Beginners
- Android Hack Tools Github
- Hacking Tools 2020
- Pentest Tools Android
- Hack Tool Apk
- Hak5 Tools
- Hack Tools Online
- Hacking Tools For Kali Linux
- Hacking Tools Usb
- Pentest Recon Tools
- Hacker Tools Free Download
- Black Hat Hacker Tools
- Beginner Hacker Tools
- Hacker Tool Kit
- What Is Hacking Tools
- Hacking Tools Download
- Hack Tools For Ubuntu
- Hack Tool Apk
- Growth Hacker Tools
- Hacker Tools For Ios
- Hacker Tools 2019
- Hacker Tools 2019
- Pentest Tools Find Subdomains
- Hacker Tools For Mac
- Hack Tools For Pc
- Tools For Hacker
- Pentest Box Tools Download
- Hacking App
- Pentest Tools Bluekeep
- Hack Tools For Games
- Hack Website Online Tool
- Hacking App
- Pentest Tools Online
- Hacking Tools 2019
- Nsa Hacker Tools
- Hack Tools
- Pentest Tools Alternative
- Hacking Tools Usb
- Hacker Tools For Ios
- Pentest Tools Review
- Hacking Tools
- Hacking Tools For Pc
- Hackers Toolbox
- Hacker
- Install Pentest Tools Ubuntu
- Termux Hacking Tools 2019
- Install Pentest Tools Ubuntu
- Hack App
- Physical Pentest Tools
- Hack Apps
- Tools 4 Hack
- Free Pentest Tools For Windows
- Pentest Tools Free
- Android Hack Tools Github
- Hacker Tools List
- Hacker Tools Free Download
- Pentest Automation Tools
- Easy Hack Tools
- Hacking Tools For Windows
- Hack Tools For Windows
- Android Hack Tools Github
- How To Make Hacking Tools
- Hack Tools For Pc
- Pentest Tools Alternative
- Tools 4 Hack
- Best Hacking Tools 2019
- Pentest Tools For Windows
- Pentest Tools Apk
- Android Hack Tools Github
- Hacking Tools For Pc
- Pentest Tools Linux
- Termux Hacking Tools 2019
- Hacker Tools For Windows
- Hacker Tools For Windows
- Hacker Tools For Windows
- Hacker Tools Online
- Easy Hack Tools
- Hacker Tools 2020
- Hack Tools
- Hacker Tools 2019
- Hacking Apps
- Hacker Tools Apk Download
- Pentest Tools For Mac
- Hack Tools For Windows
- Hacker Search Tools
- What Is Hacking Tools
- Hacking Tools Windows 10
- Tools Used For Hacking
- Wifi Hacker Tools For Windows
- Best Hacking Tools 2020
- Hacking Tools For Kali Linux
- Hacker Tools Software
- Kik Hack Tools
- Pentest Tools Url Fuzzer
- Pentest Tools Url Fuzzer
- Hack Tools Github
- Beginner Hacker Tools
- Nsa Hacker Tools
- Hack Tools For Mac
- Pentest Tools Nmap
- How To Install Pentest Tools In Ubuntu
- How To Install Pentest Tools In Ubuntu
- What Is Hacking Tools
- Hack Rom Tools
- Hacking Apps
- Tools For Hacker
- How To Hack
- Hacking Tools Github
- Hacker Tools For Ios
- Hackrf Tools
No comments:
Post a Comment