Name: New Mac malware uses 'novel' tactic to bypass macOS Catalina security | AppleInsider
Brand: appleinsider.com
SKU: appleinsider-com-12
Availability: OnlineOnly

critic

New Mac malware uses 'novel' tactic to bypass macOS Catalina security | AppleInsider

preview

&nbsp;&nbsp;&nbsp;AppleInsider is supported by its audience and may earn commission as an Amazon Associate and affiliate partner on qualifying purchases. These affiliate partnerships do not influence our editorial content.Security researchers at antivirus firm Intego have discovered a new Mac malware in the wild that tricks users into bypassing modern macOS app security protections. In , Apple introduced new requirements. The features, baked in Gatekeeper, discourage users from opening unverified apps — requiring malware authors to get more creative with their tactics. As an example, Intego researchers have discovered actively spreading in the wild via poisoned Google search results that tricks users into bypassing those protections themselves. The malware is delivered as a .dmg disk image masquerading as an Adobe Flash installer. But once it's mounted on a user's machine, it displays instructions guiding users through the malicious installation process. In a tactic described by Intego as "novel," the malware asks users to right-click and open the malware instead of double-clicking it. Per macOS Catalina Gatekeeper settings, this displays a dialogue box that has an "Open" button. Normally, when clicking an unverified file, Apple doesn't allow users to open them so conveniently. Normally, macOS discourages users from opening unverified apps by making the process more difficult. Specifically, forcing users to head into System Preferences to override Gatekeeper. The strategy also saves bad actors from signing up for an Apple Developer account or hijacking an existing one. Once users actually open the installer app, it runs a bash shell script and extracts a password-protected .zip file that contains a more traditional malicious app bundle. Although it initially installs a legitimate version of Flash, Intego notes that it can also be used to download "any other Mac malware or adware package." Interestingly, the malware has been spread via Google search results that redirect users to malicious webpages claiming that a browser's Flash Player is out of date. Intego added that the malware has, thus far, been able to avoid detection by most antivirus software. The actual malicious portions of the malware are re-engineered variants of past macOS Trojans, or Bundlore. Intego also spotted similar . Even though Adobe Flash player will , Intego notes that "outdated Flash" malware tends to be pretty successful. The aforementioned Shlayer Trojan, for example, infects about one in 10 Mac users. Since the malware is actively spreading via Google search results, the risk for compromise is a bit higher. Intego notes that it appears when users search for the exact titles of YouTube videos. Users can avoid this malware by only clicking on links that they absolutely trust. If any website asks you to download something unsolicited, get out of there. Indicators of compromise can include the following apps: flashInstaller.dmv in Downloads; a FlashInstaller.zip file or a file named "Installer" in a subfolder in private/var/folders. Intego notes that several domains — including youdontcare.com, display.monster, yougotupdated.com and installerapi.com — have been associated with this campaign. Any traffic to or from these domains "should be considered a possible sign of an infection," the researchers said.I should be fine. Don't use Google search and will never install Flash ever again. Apple should treat anything related to Flash as malware, especially since it has always been the easiest way to infect Macs (outside Word malware). I know there are people who still use and develop in Flash but let's move on.&nbsp;Which is worse, a real Flash installer or a fake one? It's a toss-up.Just say no to Flash has been the watchword for years. Fortunately, Flash will be saying no to us all at the end of the year, as Adobe closes it down.Meanwhile, if you use some kind of legacy service that requires Flash, stop!said:I should be fine. Don't use Google search and will never install Flash ever again.Well Said. This is exactly the advice that I've been giving out for around six years. I removed Flash from my old MBP in 2014 and have never needed to install it again. Any website that demands it gets ignored withing a few seconds. Thankfully, they are reducing in number.I am old enough to remember — can’t believe it was over 13 years ago! — SJ saying Flash was crap, and taking so much heat for it.&nbsp;Wait. Who’s still using Flash on websites? I haven’t been to Fat-Pie or Home Star Runner in years and I think they just publish videos now anyway. I’m sure it’s still great to have as an animation tool, but not as a browser plugin or web feature.Please enable JavaScript to comment&nbsp;An app called Diffusion Bee lets users run the Stable Diffusion machine learning model locally on their Apple Silicon Mac to create AI-generated art. Here's how to get started.Apple announced iCloud Shared Photo Library as part of iOS 16, but it appears that the feature won't arrive in the iOS 16 release on September 12.An SEC filing from Globalstar reveals that Apple plans to use 85% of its current and future network capacity for its services to iPhone 14 consumers, and pay for future satellite upgrades.Apple's iPhone 14 Pro and iPhone 14 Pro Max have arrived. Here's how they stack up versus the iPhone 13 Pro and Pro Max.Apple's iPhone 14 is aimed at about the same market that the iPhone SE targets. Here's how it compares to the third-generation iPhone SE.Apple reintroduced the Plus iPhone descriptor at its event on Wednesday with the introduction of the iPhone 14 Plus. Here's how it compares to the iPhone 14 Pro Max.Apple has launched its iPhone 14 range, but on the surface it's a tough compare to the iPhone 13. Here's what's different and if it's good enough for an upgrade.The Apple Watch Series 8 and Apple Watch Ultra are the company's newest wearable accessories, and these are the features that might tempt new buyers or Apple Watch Series 7 owners.&nbsp;Apple has shared a new video that explains how its new Crash Detection feature can detect serious car crashes and alert emergency responders automatically.An app called Diffusion Bee lets users run the Stable Diffusion machine learning model locally on their Apple Silicon Mac to create AI-generated art. Here's how to get started.Safari 16.0 has been released for Apple's ecosystem, with the latest version of the browser for iOS 16 now able to open AVIF images ahead of similar support in macOS Ventura and iPadOS.For 72 hours only, save $150 on Apple's upgraded MacBook Air M2 at Apple Authorized Reseller B&amp;H Photo. Plus, enjoy free expedited shipping in the contiguous U.S.Users who were trying to accept new App Store terms and conditions in the wake of the iOS 16 or iOS 15.7 updates were getting blocked by a recurring error.It's been a rocky road to the iOS 16 launch. Here are the high-profile features that didn't debut in the initial release of Apple's operating system.A future update to iOS 16 will make the iPhone even more environmentally friendly, with Clean Energy Charging prioritizing recharging at times when cleaner energy sources are available.In September 2017, Tim Cook said the iPhone X would "set the path for technology for the next decade." Halfway through that decade, it looks like Cook was right.An app called Diffusion Bee lets users run the Stable Diffusion machine learning model locally on their Apple Silicon Mac to create AI-generated art. Here's how to get started.Apple announced iCloud Shared Photo Library as part of iOS 16, but it appears that the feature won't arrive in the iOS 16 release on September 12.An SEC filing from Globalstar reveals that Apple plans to use 85% of its current and future network capacity for its services to iPhone 14 consumers, and pay for future satellite upgrades.It's been a rocky road to the iOS 16 launch. Here are the high-profile features that didn't debut in the initial release of Apple's operating system.Apple's annual update to its operating system brings new features and much-needed changes. Here are the stand-out features in iOS 16.Apple's "Far Out" event is on September 7. Beyond the new iPhone 14, here's what to expect from September's Apple event — and beyond.Apple's iOS 16 will make the iPhone more customizable than ever. This is the ultimate guide on how to make the iPhone a more personal device.The second-generation Razer Kishi is here for iPhone users with a new design, better buttons, and a companion app. How does it stack up to the Backbone One?Less an overhaul and more refining what's already in place, iOS 16 is all about personalization on top of a retained solid foundation.With the SwitchEasy four-in-one MagPower multi-charger, you can power up all your gear with a single device — including your Apple Watch with an Apple-certified puck.The Benks Grand Pro Headphone Stand for AirPods Max is a welcome upgrade over the original. However, it introduces complexity where there was none before — while also ignoring an obvious problem.Keep tabs on the air quality of your home — including potentially deadly radon levels — with the Airthings View Plus.Apple didn't make a Magic Keyboard for iPad mini 6, and Lululook's Magnetic Keyboard perhaps acts as a testament to why.{{ summary }}{{{ reviewStars.html }}}

&nbsp;&nbsp;&nbsp;AppleInsider is supported by its audience and may earn commission as an Amazon Associate and affiliate partner on qualifying purchases. These affiliate partnerships do not influence our editorial content.Security researchers at antivirus firm Intego have discovered a new Mac malware in the wild that tricks users into bypassing modern macOS app security protections. In , Apple introduced new requirements. The features, baked in Gatekeeper, discourage users from opening unverified apps — requiring malware authors to get more creative with their tactics. As an example, Intego...

New Mac malware uses 'novel' tactic to bypass macOS Catalina security | AppleInsider

No article scores yet.

CRITIC REVIEWS

PUBLIC REVIEWS