UCONA

Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has undergone several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."

The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones information stealer to a second-stage payload distributor as part of multiple attack waves observed in 2021.

"The latest campaign saw the malware installing the evasive and persistent Adload adware, but UpdateAgent's ability to gain access to a device can theoretically be further leveraged to fetch other, potentially more dangerous payloads," the researchers said.

The actively in-development malware is said to be propagated via drive-by downloads or advertisement pop-ups that masquerade as legitimate software like video applications and support agents, even as the authors have made steady improvements that have transformed UpdateAgent into a progressively persistent piece of malware.

Chief among the advancements include the capability to abuse existing user permissions to surreptitiously perform malicious activities and circumvent macOS Gatekeeper controls, a security feature that ensures only trusted applications from identified developers can be installed on a system.

In addition, UpdateAgent has been found to take advantage of public cloud infrastructure, namely Amazon S3 and CloudFront services, to host its second-stage payloads, including adware, in the form of .DMG or .ZIP files.

Once installed, the Adload malware makes use of ad injection software and man-in-the-middle (MitM) techniques to intercept and reroute users' internet traffic through the attacker's servers to insert rogue ads into web pages and search engine results to increase the chances of multiple infections on the devices.

"UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns," the researchers cautioned.

The Hacker News: The Hacker News — most trusted and widely-acknowledged online cyber security news magazine with in-depth technical coverage for cybersecurity.
Hakin9: E-magazine offering in-depth looks at both attack and defense techniques and concentrates on difficult technical issues.
Offensive Security Training: Developers of Kali Linux and Exploit DB, and the creators of the Metasploit Unleashed and Penetration Testing with Kali Linux course.
HackRead: HackRead is a News Platform that centers on InfoSec, Cyber Crime, Privacy, Surveillance, and Hacking News with full-scale reviews on Social Media Platforms.
KitPloit: Leading source of Security Tools, Hacking Tools, CyberSecurity and Network Security.
Packet Storm: Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers.
Phrack Magazine: Digital hacking magazine.
DEFCON: Information about the largest annual hacker convention in the US, including past speeches, video, archives, and updates on the next upcoming show as well as links and other details.
SecTools.Org: List of 75 security tools based on a 2003 vote by hackers.
Makezine: Magazine that celebrates your right to tweak, hack, and bend any technology to your own will.
Hacked Gadgets: A resource for DIY project documentation as well as general gadget and technology news.
NFOHump: Offers up-to-date .NFO files and reviews on the latest pirate software releases.
Black Hat: The Black Hat Briefings have become the biggest and the most important security conference series in the world by sticking to our core value: serving the information security community by delivering timely, actionable security information in a friendly, vendor-neutral environment.
Metasploit: Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit. Get the worlds best penetration testing software now.
Hackaday: A hardware hack every day.
SecurityFocus: Provides security information to all members of the security community, from end users, security hobbyists and network administrators to security consultants, IT Managers, CIOs and CSOs.
Hack Forums: Emphasis on white hat, with categories for hacking, coding and computer security.
Exploit DB: An archive of exploits and vulnerable software by Offensive Security. The site collects exploits from submissions and mailing lists and concentrates them in a single database.

UCONA

jueves, 25 de mayo de 2023

2933 hash passwords

New Variant Of UpdateAgent Malware Infects Mac Computers With Adware

Related articles

God Of War PS4 Walkthrough Part - 1

domingo, 12 de marzo de 2023

<> Negative SEO Services <>

martes, 3 de enero de 2023

<> NEW! Social SEO <>

viernes, 14 de octubre de 2022

<> Semrush Links <>

jueves, 1 de septiembre de 2022

<> Cheap Country Targeted website traffic <>

viernes, 5 de agosto de 2022

Top 18 Websites to Learn How to Hack Like a Pro 2018

¿CREE QUE EL JUEZ DEL CONO ESTE, EDGAR VIZCARRA PACHECO ES INOCENTE DE LAS GRAVES ACUSACIONJES QUE LE IMPUTAN?

Buscar este blog

Datos personales

Seguidores

Archivo del blog

VISITAS