Indeed, these incidents couldn’t be timelier with Safer Internet Day, especially if these threats put the users’ digital experience at risk and expose their data to theft. Even social media and web stores aren’t spared from abuse. For instance, investors of Bee Token and Experty were duped into sending their tokens to fraudsters with a simple phishing email, costing them over $1 million in ethereum. While the cyber faux pas has accordingly been fixed, it highlights how adverse the impact can be for what may seem cursory. Users who have downloaded Firefox 58.0.2, OnyX, and Deeper from February 1 to 2 via MacUpdate are urged to delete copies that may have been installed in the system.
#Macupdater 2 download
So how did OSX.CreativeUpdate wound up on the MacUpdate website? MacUpdate admitted that they inadvertently linked the download sites of legitimate Mac applications to fake domains. This means that on any system between 10.7 and 10.12, the malware will run, but the decoy app won’t open to cover up the fact that something malicious is going on.”
#Macupdater 2 mac os x
Security researcher Thomas Reed analyzed the ways OSX.CreativeUpdate affected a machine, noting, “For example, the malicious OnyX app will run on Mac OS X 10.7 and up, but the decoy OnyX app requires macOS 10.13. OSX.CreativeUpdate, so named because it was retrieved from abused Adobe Creative Cloud servers, was made with Platypus, an open-source tool for creating macOS applications. It’s no surprise that security researcher Arnaud Abbati uncovered a new Monero-mining malware - OSX.CreativeUpdate (detected by Trend Micro as OSX_COINMINE.B) - packaged with decoy copies of Firefox as well as OnyX and Deeper system maintenance and optimization tools. Cryptocurrency-mining malware entered the macOS scene in 2011 as a bitcoin-mining backdoor embedded in applications distributed via torrents. Cryptocurrency-mining malware, for instance, first gained ground on Windows systems then went to affect Android-run mobile devices.
If there’s anything constant in the ever-evolving technology and threat landscapes, it’s that no platform will be truly immune.
0 kommentar(er)
