Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.
"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.
The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.
Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.
In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.
Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.
"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.
More information- Hack App
- Hacker Tools
- Hacker Tools List
- Hacker Tools Mac
- Hacking App
- What Are Hacking Tools
- Pentest Tools Linux
- Blackhat Hacker Tools
- Hacking App
- Hacker Tools Apk Download
- What Are Hacking Tools
- New Hack Tools
- Kik Hack Tools
- Hack Tools For Ubuntu
- Best Pentesting Tools 2018
- Hacker Tools Free
- Hacker Search Tools
- Pentest Tools Kali Linux
- Hacking Tools Software
- Github Hacking Tools
- Hacking Tools Windows 10
- Hacking Tools Usb
- New Hack Tools
- Hackers Toolbox
- Android Hack Tools Github
- Hack Tools
- Hacker Tools Hardware
- Hacker Tools Free Download
- Hacking Tools Online
- Pentest Tools Kali Linux
- How To Make Hacking Tools
- Hacking Tools Kit
- What Is Hacking Tools
- Hack Tools Pc
- Pentest Tools Alternative
- Ethical Hacker Tools
- Pentest Tools Website Vulnerability
- Hacker Tools Apk
- Hacker Tools For Pc
- Hacking Tools 2019
- What Is Hacking Tools
- Hack Tools For Mac
- Hacker Tools 2019
- Pentest Tools Nmap
- Hacking Tools Hardware
- Pentest Tools Subdomain
- Hacking Tools For Windows
- Best Pentesting Tools 2018
- Hacking Tools For Beginners
- Hacking Tools Pc
- Hacking Tools For Windows 7
- Hacker Tools Free Download
- Hacker Tools Apk Download
- Hack App
- Hacking Tools Kit
- Hack Tools Github
- Pentest Tools Android
- Hack Website Online Tool
- Pentest Tools Nmap
- Ethical Hacker Tools
- How To Install Pentest Tools In Ubuntu
- Pentest Tools Find Subdomains
- Hacker
- Pentest Tools Find Subdomains
- Hacker Tools For Pc
- Hacking Tools For Games
- Hacking Tools Software
- Hack App
- Pentest Tools Port Scanner
- Hack Tools For Ubuntu
- Pentest Tools Alternative
- Hack Apps
- Hacker Tools Apk Download
- Hack Tools For Pc
- Hacking Tools Download
- Hacking App
- Pentest Tools Kali Linux
- Tools For Hacker
- Pentest Tools Bluekeep
- Best Pentesting Tools 2018
- New Hack Tools
- Beginner Hacker Tools
- Hacking Tools Hardware
- Hack Tools Mac
- Pentest Tools Tcp Port Scanner
- Hacking Tools For Windows 7
- Hacker Search Tools
- Hack Apps
- Hack Tools For Windows
- Hacker Tools For Ios
- Hack Tools
- Install Pentest Tools Ubuntu
- Best Hacking Tools 2020
- How To Install Pentest Tools In Ubuntu
- Hacking Tools Usb
- Pentest Tools Website Vulnerability
- Hacker Tools Free Download
- Hacker Tools Online
- Hacker Tools Github
- Hack Tools For Games
- Pentest Tools Website Vulnerability
- Hack Tools
- Hacker Tools For Pc
- Physical Pentest Tools
- Hackrf Tools
- Hacker Tools For Windows
- Hacker Tools Apk Download
- Growth Hacker Tools
- Hack Tool Apk
- Hacks And Tools
- Hack Tools
- Pentest Tools Open Source
- Pentest Box Tools Download
- Hak5 Tools
- Pentest Tools Github
- Hack Tools Download
- Pentest Tools Nmap
- Termux Hacking Tools 2019
- Hacking Tools Kit
- Hacking Tools Kit
- What Is Hacking Tools
- Nsa Hack Tools Download
- Hacker Tools
- Hacker Tools 2020
- Pentest Tools Review
- Pentest Tools Tcp Port Scanner
- Hacking Tools Kit
- Hacker Tools For Ios
- Hacker Tools Mac
- Hacker Tools Mac
- What Are Hacking Tools
- Hacker Tools Hardware
- Growth Hacker Tools
- Hacker Search Tools
- Best Hacking Tools 2019
- Pentest Tools For Mac
- Tools For Hacker
- Hacking Tools For Windows
- Hacker Tools For Pc
- Pentest Tools Download
- Pentest Tools For Android
- Android Hack Tools Github
- Install Pentest Tools Ubuntu
- Bluetooth Hacking Tools Kali
- Hacking Tools For Pc
- Pentest Tools Windows
- New Hacker Tools
- Usb Pentest Tools
- Hacker Tools List
- Hack Tools For Pc
- Hacking Tools For Mac
- Android Hack Tools Github
- Hacker Tools For Mac
- Hacking App
- Pentest Tools Free
- Underground Hacker Sites
- Pentest Tools For Windows
- Hacker Hardware Tools
- Beginner Hacker Tools
- Hacker Tools 2019
- Hackrf Tools
- Hacker Tools For Mac
- Hack Tools Mac
- Hack Rom Tools
- Hacking App
- Tools For Hacker
Nenhum comentário:
Postar um comentário