Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.
"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.
The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.
Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.
In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.
Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.
"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.
Related word
- Pentest Tools Open Source
- Black Hat Hacker Tools
- Pentest Tools Website Vulnerability
- World No 1 Hacker Software
- Hacking Tools Usb
- Bluetooth Hacking Tools Kali
- Kik Hack Tools
- Pentest Box Tools Download
- Beginner Hacker Tools
- Hacker Tools Linux
- Hacking Tools 2020
- Bluetooth Hacking Tools Kali
- Hacker Tools Linux
- Pentest Reporting Tools
- Blackhat Hacker Tools
- Growth Hacker Tools
- Hacker Tool Kit
- Hacker Tools List
- Pentest Tools Github
- Pentest Tools Open Source
- Hacking Tools Software
- Black Hat Hacker Tools
- Pentest Tools Nmap
- Hack Tools For Ubuntu
- Game Hacking
- Tools For Hacker
- Pentest Tools Download
- Hacker Security Tools
- Pentest Recon Tools
- Pentest Tools Open Source
- Pentest Tools Website Vulnerability
- Hacking Tools Online
- Hacker Tools For Mac
- Hacking Tools Mac
- How To Make Hacking Tools
- Hacker Tools Mac
- Best Hacking Tools 2020
- Hacker Tools Windows
- Hacker Tools For Ios
- Bluetooth Hacking Tools Kali
- Hacker Tools
- Hacker Security Tools
- Tools Used For Hacking
- Kik Hack Tools
- Hacker Tools Mac
- Hack Rom Tools
- Install Pentest Tools Ubuntu
- Hacker Hardware Tools
- Hack Tool Apk
- Hackers Toolbox
- Hacker Tools 2019
- Hacker Tools Windows
- Nsa Hack Tools Download
- Tools Used For Hacking
- Hacker Tools Software
- Best Hacking Tools 2020
- Nsa Hacker Tools
- Pentest Tools Nmap
- Pentest Tools Framework
- Hacker Security Tools
- Hacking Tools Usb
- Nsa Hack Tools
- Pentest Tools Apk
- New Hacker Tools
- How To Make Hacking Tools
- Pentest Reporting Tools
- Underground Hacker Sites
- Hacking Tools For Pc
- Pentest Tools Online
- Hacker Tools Mac
- Pentest Tools Free
- Tools 4 Hack
- Hacking Tools And Software
- Blackhat Hacker Tools
- Hacking Tools Free Download
- Hack Website Online Tool
- Tools 4 Hack
- World No 1 Hacker Software
- Pentest Tools Nmap
- Hak5 Tools
- Game Hacking
- Hack Rom Tools
- Pentest Tools For Android
- Hack Tools For Games
- Pentest Tools For Ubuntu
- Pentest Tools
- Hackers Toolbox
- New Hack Tools
- Pentest Tools Alternative
- Best Hacking Tools 2019
- Hack Tools For Pc
- Termux Hacking Tools 2019
- Hackers Toolbox
- Free Pentest Tools For Windows
- Hack Tool Apk No Root
- Hack App
- Hacker Tools For Mac
- New Hack Tools
- Hackers Toolbox
- Hacking Tools Hardware
- Hacker Tools Free
- Pentest Tools For Windows
- Hacking Tools Online
- Hack Website Online Tool
- Hak5 Tools
- Hacker Tools Software
- Hacker Tools For Mac
- Pentest Tools Apk
- Pentest Tools Subdomain
- Free Pentest Tools For Windows
- Ethical Hacker Tools
- Pentest Tools Online
- Hacker Tools Apk Download
- Hacker Tools Hardware
- How To Install Pentest Tools In Ubuntu
- Hacker Techniques Tools And Incident Handling
- Pentest Reporting Tools
- Hack Tools
- Black Hat Hacker Tools
- Top Pentest Tools
- Hack Website Online Tool
- Hacking Tools Download
- Hacking Tools And Software
- Tools For Hacker
- Android Hack Tools Github
- Hack Tools For Mac
- Hack Apps
- Pentest Tools Github
- Hack Tool Apk No Root
- Hacking Tools 2020
- Hacker Tools
- Pentest Tools List
- Hacking Tools For Kali Linux
- Beginner Hacker Tools
- Tools For Hacker
- Hacking Tools For Windows Free Download
- Pentest Tools Website
- Hacking Tools Hardware
- Pentest Tools
- Pentest Tools Website
- Hacker
- Hack App
- Hacking Tools For Windows 7
- World No 1 Hacker Software
- Pentest Tools Linux
- Hacker Tools For Pc
- Pentest Tools Windows
- Hacking Tools Pc
- Top Pentest Tools
- Hacker Tools 2019
- Top Pentest Tools
- Top Pentest Tools
- Pentest Tools Url Fuzzer
- Hacking Apps
- Hacking Tools For Windows Free Download
- Pentest Tools Subdomain
- Usb Pentest Tools
- Hacking Tools Pc
- Hack Apps
- Hacking Tools Kit
- Pentest Tools Free
- Hacker Tools Online
- Hacker Tools Hardware
- Hack Tools For Games
- Pentest Tools Free
- How To Make Hacking Tools
- Tools 4 Hack
- Hack Tools Online
- Android Hack Tools Github
0 comentários:
Postar um comentário