Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.
"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.
The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.
Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.
In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.
Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.
"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.
Related word
- Pentest Tools Tcp Port Scanner
- Hacker Tools 2019
- Pentest Recon Tools
- Pentest Tools For Windows
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Windows
- Hack And Tools
- How To Make Hacking Tools
- Physical Pentest Tools
- How To Hack
- Free Pentest Tools For Windows
- Pentest Tools For Windows
- Hacker Tools
- Hacker Tools Software
- Hacking Tools And Software
- Hack Tools Pc
- Termux Hacking Tools 2019
- Pentest Tools For Mac
- Hacker Tools Github
- Hacker Tools For Ios
- Kik Hack Tools
- Hacking Tools For Windows
- Install Pentest Tools Ubuntu
- Hacking Tools Usb
- Hacking Tools For Windows Free Download
- Pentest Tools Github
- Hacker Tools 2019
- Hacker Tool Kit
- World No 1 Hacker Software
- Hacker Tools For Windows
- Hacker Security Tools
- Pentest Tools Open Source
- Hackrf Tools
- Hack App
- Hacking Tools Online
- How To Install Pentest Tools In Ubuntu
- Hacker Tools 2020
- Pentest Tools Online
- Hacking Tools For Beginners
- Hacker Tools Github
- Best Hacking Tools 2020
- Free Pentest Tools For Windows
- Hacking Tools For Games
- Beginner Hacker Tools
- Termux Hacking Tools 2019
- Hacking Tools For Kali Linux
- Nsa Hacker Tools
- Hack Tools Online
- Hacking Tools Kit
- Hackrf Tools
- Termux Hacking Tools 2019
- Hack Tools
- Hacker Hardware Tools
- Hacking Tools For Windows 7
- Hack Tools Online
- Hacker Tools Windows
- Ethical Hacker Tools
- Tools For Hacker
- Hack App
- Termux Hacking Tools 2019
- Hacking Tools For Windows
- Hacker Hardware Tools
- Top Pentest Tools
- Hacker Tools For Windows
- Hacking Tools 2019
- Growth Hacker Tools
- Pentest Tools Online
- Best Pentesting Tools 2018
- Hacker Tools Software
- Hacking Tools Kit
- Hack Tools
- Pentest Tools List
- Hacker
- Hacking Apps
- Hacker Tools For Windows
- Hacking Tools 2019
- Tools For Hacker
- Tools For Hacker
- Hacking Tools Windows 10
- Hacker Tools
- Hacker Tools Hardware
- Pentest Reporting Tools
- Android Hack Tools Github
- Physical Pentest Tools
- Hacker Tools Apk
- Pentest Tools Find Subdomains
- Pentest Tools
- Hacking Tools Software
- Kik Hack Tools
- Hacking Apps
- Hacker Search Tools
- Hacker Tools For Pc
- Pentest Tools For Windows
- Nsa Hack Tools
- Pentest Tools Online
- Hacker Security Tools
- Pentest Tools Website
- Pentest Tools Windows
- Hacking Apps
- Pentest Tools Nmap
- Hack Tools
- What Are Hacking Tools
- Install Pentest Tools Ubuntu
- Pentest Tools Framework
- Underground Hacker Sites
- Ethical Hacker Tools
- Usb Pentest Tools
- New Hack Tools
- Best Pentesting Tools 2018
- Hacking Tools Github
- Pentest Tools Github
- Pentest Tools For Ubuntu
- Blackhat Hacker Tools
- Pentest Automation Tools
- Hacking Apps
- Pentest Tools Windows
- Tools Used For Hacking
- Hacker Tools Free Download
- Hacker Tools List
- Hacking App
- Tools For Hacker
- Hack Tools For Windows
- Hacker Tools 2019
- Hack And Tools
- Hacking Tools
- Growth Hacker Tools
- Hacker Tool Kit
- Hacking Tools Hardware
- Pentest Tools Website Vulnerability
- Game Hacking
- Pentest Tools Subdomain
- Pentest Automation Tools
- Pentest Tools For Ubuntu
- Underground Hacker Sites
- Beginner Hacker Tools
- Pentest Tools Open Source
- Hacker Tools Mac
- Best Hacking Tools 2020
- Pentest Tools Website
- Hackers Toolbox
- Hacker Tools Apk Download
- Hacker Tools Windows
- Hacking App
- Hack Tools
- Hacker Tools Free
- Hacker Tools 2019
- Pentest Tools Kali Linux
- Hacker Tools Mac
- Hacking Tools 2019
- Pentest Tools Bluekeep
- Hack Tools For Mac
- Best Hacking Tools 2019
- Best Pentesting Tools 2018
- Hackrf Tools
- What Is Hacking Tools
- Pentest Tools Windows
- Hack And Tools
- Nsa Hacker Tools
- Physical Pentest Tools
- Hacking App
- Hacking Tools Windows 10
- Beginner Hacker Tools
- Github Hacking Tools
- Hacking Tools For Beginners
- Pentest Tools Port Scanner
No comments:
Post a Comment