A Malware That Bypasses macOS Security Has Been Discovered

Researchers at antivirus firm Intego, macOS discovered a new type of malware that infiltrates the device by deceiving users. In macOS Catalina, Apple introduced new app approval requirements. Apple's gatekeeper Features determined by technology; discourages users from opening unverified apps. For this reason, those who produce malware seem to have become more creative in their tactics.

Intego researchers have discovered a new trojan They discovered the malware while it was actively spreading. This software bypasses Apple protections and enters the system by deceiving users through corrupted Google search results. malware, Adobe Flash installer one that looks like .dmg It comes in the form of disk extension. Once opened on the user's computer, it guides the user through the installation process and displays instructions.

It is considered a new tactic:

In this method, which is described as a unique tactic by Intego; malware, users to download the software couple click in its place Right by clicking He wants them to open it. In the macOS Catalina Gatekeeper settings, in this case, a dialog window opens and there is also an 'Open' button. Under normal circumstances, when you click on an unverified file, Apple does not allow you to open them.

Again, under normal conditions, macOS; by making it difficult for users to open unverified files to prevent it works. System; specifically, it forces users to override Gatekeeper by redirecting them to System Preferences. This strategy also protects malicious people from Apple developer It also protects you from logging into your account or from theft of an existing one. 

When users open the installation application, 'bash shell script' A command called is running and is password protected. .zip file appears. This .zip The file contains a more traditional malware application package. Although it initially installs a valid version of Flash, Intego notes that it can also be used to download other Mac malware or adware bundles. 

The interesting thing is that the malware Google call results spread through. These results redirect users to malicious websites, which in turn tell users that the Flash Player in their browser is outdated. According to Intego, this malware was detected by many antivirus software. stripped.

Although Adobe Flash Player will expire on December 31, 2020, it is noted that the outdated Flash Player scam was successful. To users, completely sure they are It is recommended to click on the links. If a website wants to make you download something you do not want, it is recommended that you leave that site immediately.