Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.
"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.
The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.
Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.
In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.
Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.
"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.
Continue reading- Hacker Techniques Tools And Incident Handling
- Tools For Hacker
- Nsa Hack Tools Download
- Hacking Tools For Pc
- Pentest Recon Tools
- Hacker Tool Kit
- Hacker Tools Mac
- Pentest Tools For Ubuntu
- Hacking Tools For Windows
- Hack Tool Apk No Root
- Pentest Tools For Windows
- Hacking Tools Pc
- Hack Tools For Pc
- Kik Hack Tools
- Hacker Security Tools
- Pentest Tools Subdomain
- Hacker Tools
- Hacking Tools For Mac
- Top Pentest Tools
- Hacker
- Hacker Tools Mac
- Best Hacking Tools 2019
- Hacking Tools Online
- Hacking Tools Hardware
- What Is Hacking Tools
- Hacker Security Tools
- Pentest Tools Open Source
- Hacking Tools Github
- Pentest Tools Tcp Port Scanner
- Tools Used For Hacking
- Growth Hacker Tools
- Hacker Tools For Ios
- Pentest Tools Tcp Port Scanner
- Pentest Automation Tools
- Pentest Recon Tools
- How To Install Pentest Tools In Ubuntu
- Hacker Tools 2019
- Beginner Hacker Tools
- What Are Hacking Tools
- Ethical Hacker Tools
- Hacker Tools List
- Hackrf Tools
- Pentest Tools Free
- Hacker Tools Free Download
- Tools Used For Hacking
- Hack Tools For Mac
- Hacks And Tools
- Tools 4 Hack
- Hacking Tools Github
- Best Hacking Tools 2019
- Hack Tools Pc
- Ethical Hacker Tools
- Pentest Reporting Tools
- Hack Tool Apk
- Pentest Tools Tcp Port Scanner
- Hack Tools For Windows
- Hack And Tools
- Pentest Tools Website Vulnerability
- Pentest Automation Tools
- Pentest Tools Url Fuzzer
- Pentest Tools Port Scanner
- Pentest Reporting Tools
- Hacking Tools Free Download
- How To Install Pentest Tools In Ubuntu
- Hacks And Tools
- Nsa Hack Tools
- Pentest Tools Subdomain
- Hacking Tools For Kali Linux
- Pentest Tools Url Fuzzer
- Pentest Box Tools Download
- Hacker Tools
- Hacker Tools For Pc
- Pentest Tools Apk
- Free Pentest Tools For Windows
- Hacking Tools
- Pentest Box Tools Download
- Hacking Tools Windows
- Black Hat Hacker Tools
- Hacking Tools
- Hack Website Online Tool
- Pentest Tools Tcp Port Scanner
- Pentest Automation Tools
- Usb Pentest Tools
- Hacking Tools For Games
- Hack Tools For Windows
- Nsa Hack Tools Download
- Hacking Tools For Games
- Hacking Tools Pc
- Termux Hacking Tools 2019
- Pentest Tools Review
- Android Hack Tools Github
- Hack Tools Github
- Hacking Tools For Windows 7
- Nsa Hacker Tools
- Hacker Tool Kit
- Beginner Hacker Tools
- Hacker Tools Software
- Hacking Tools Kit
- Pentest Box Tools Download
- Hacker Tools Software
- Hacker Security Tools
- Hack Tools Mac
- Hacking Tools Windows 10
- Hacking Tools Windows 10
- Hack Apps
- Hacking Tools Download
- Hacker Tools For Mac
- Pentest Tools Download
- Pentest Tools Url Fuzzer
- Hack Tools For Mac
- Hacker Tools 2019
- Best Hacking Tools 2020
- Pentest Tools Bluekeep
- Pentest Tools Url Fuzzer
- Hack Tools Download
- Hacker Tool Kit
- Hacker Tools Free
- Best Hacking Tools 2019
- Hacking Tools 2020
- Best Hacking Tools 2019
- Hacking Tools Free Download
- Pentest Tools Open Source
- Hack Tools Github
- Hacking Tools Windows 10
- Hack Tools Pc
- Hacker Tools Apk Download
- Pentest Tools Download
- Hacker Tools Windows
- Usb Pentest Tools
- Hacker Tools For Mac
- Tools For Hacker
- Hacking Tools For Mac
- Hacker Hardware Tools
- Hacker Tools Free
- Hacking Tools Kit
- Pentest Tools For Windows
- Hackrf Tools
- Hacking Tools Mac
- Hacker Tools 2019
- Hack Tools For Mac
- Hacking Tools Mac
- How To Install Pentest Tools In Ubuntu
0 comments:
Post a Comment