Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.
"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.
The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.
Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.
In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.
Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.
"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.
More information
- Hack Tool Apk No Root
- Pentest Tools Android
- Hack Tools
- Pentest Tools Open Source
- Hack Tool Apk
- Hacking Tools Windows 10
- Hacks And Tools
- Hacking Tools For Kali Linux
- Android Hack Tools Github
- Install Pentest Tools Ubuntu
- Hacker Tools Free
- Hacking Tools Kit
- Computer Hacker
- Hack Tools For Ubuntu
- Hacker Tools
- Hacker Tools For Ios
- Hack Tools Online
- Hacker Hardware Tools
- Pentest Tools Bluekeep
- Hack Tools Github
- Tools Used For Hacking
- Growth Hacker Tools
- Hacking Tools Hardware
- Pentest Tools
- Hacking Tools
- Wifi Hacker Tools For Windows
- Pentest Tools Free
- Pentest Tools Android
- Hacking Tools Online
- Hacker Tools Free Download
- Wifi Hacker Tools For Windows
- Pentest Tools Linux
- Hacking Tools For Windows 7
- Hacking App
- Hacking Tools For Pc
- Hacking Tools Kit
- Hack Tools Mac
- Ethical Hacker Tools
- Hacker Tools For Ios
- Hacking Tools Pc
- Pentest Tools Windows
- Pentest Tools
- Hacker Tool Kit
- Hacking Tools For Mac
- Hack Tool Apk
- Hacking Tools For Windows Free Download
- Hacker Tools 2019
- Hacking Tools For Windows Free Download
- Pentest Tools Subdomain
- Pentest Tools
- Pentest Tools For Ubuntu
- Hacker Tools Apk Download
- Top Pentest Tools
- Hack Website Online Tool
- Best Hacking Tools 2020
- Hackrf Tools
- Pentest Tools For Mac
- Pentest Tools Bluekeep
- Hacker Tools Apk Download
- Hacker Tools Windows
- World No 1 Hacker Software
- Hacker Tools Apk
- Pentest Box Tools Download
- Hack Tools
- Hacking Tools Download
- Hackers Toolbox
- Pentest Tools Website Vulnerability
- Growth Hacker Tools
- Tools Used For Hacking
- Usb Pentest Tools
- Hacker Security Tools
- Hackrf Tools
- Pentest Tools Nmap
- Hacking Tools Mac
- Hackers Toolbox
- Pentest Tools Android
- Pentest Box Tools Download
- Pentest Tools Nmap
- Pentest Tools For Windows
- Hacker Tools List
- Pentest Tools Windows
- Pentest Automation Tools
- Computer Hacker
- Hacker Search Tools
- Hacking Tools For Pc
- Hacking Tools Download
- Hacker Hardware Tools
- World No 1 Hacker Software
- What Are Hacking Tools
- Pentest Tools List
- Pentest Tools For Windows
- Hacker Tools Linux
- Hak5 Tools
- Hacking Tools Kit
- Ethical Hacker Tools
- Hacking Tools And Software
- Hack Tools Pc
- Physical Pentest Tools
- Hack Tool Apk
- Pentest Tools Windows
- What Are Hacking Tools
- Hacking Tools Free Download
- Pentest Reporting Tools
- Underground Hacker Sites
- Pentest Tools Framework
- Hacking Apps
- Hacker Tools For Ios
- What Is Hacking Tools
- Beginner Hacker Tools