article thumbnail

New Shlayer Mac malware spreads via poisoned search engine results

Security Affairs

“As of Friday, the new malware installer and its payload had a 0/60 detection rate among all antivirus engines on VirusTotal.” The bash shell script opens and runs itself in the Terminal app, then it extracts a self-embedded, password-protected.zip archive file, which contains a traditional Mac.app bundle. up to 10.14.3.

article thumbnail

Trending “Fireball” Adware Raises Botnet Concerns

SiteLock

Earlier this week, security researchers reported on a trending adware infection known as Fireball. While the infection currently appears to only make changes to victims’ browser homepages and search engines, analysis suggests that the software could be remotely leveraged to act as a malware dropper. Strong passwords are a good start.

Adware 52
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

A week in security (August 22 - August 28)

Malwarebytes

Criminals socially engineer their way to bank details with fake arrest warrants. Reset your password now! Source code of password manager LastPass stolen by attacker. Adware found on Google Play — PDF Reader servicing up full screen ads. Google flags man as sex abuser after he sends photos of child to doctor.

article thumbnail

Threat in your browser: what dangers innocent-looking extensions hold for users

SecureList

All of them were used to siphon off sensitive user data, such as cookies and passwords, and even take screenshots; in total, these malicious extensions were downloaded 32 million times. Since the beginning of 2020, Kaspersky products prevented 6,057,308 users from downloading malware , adware and riskware disguised as browser extensions.

Adware 104
article thumbnail

No “Apple magic” as 11% of macOS detections last year came from malware

Malwarebytes

Separately, in September 2023, Malwarebytes discovered a cybercriminal campaign that tricked Mac users into accidentally installing a type of malware that can steal passwords, browser data, cookies, files, and cryptocurrency. Replace “magic” with Malwarebytes Cyberthreats on Mac aren’t non-existent, they’re just different.

Malware 136
article thumbnail

macOS: Bashed Apples of Shlayer and Bundlore

Security Affairs

Though these scripts have slight variations, they mostly belong to a plague of adware strains— Shlayer and Bundlore. The malicious shell scripts used by Shlayer and Bundlore are usually malvertising-focused adware bundlers using shell scripts in the kill chain to download and install an adware payload.

Adware 119
article thumbnail

Security Affairs newsletter Round 423 by Pierluigi Paganini – International edition

Security Affairs

Gox exchange and operating BTC-e Japanese Pharmaceutical giant Eisai hit by a ransomware attack Clop ransomware gang was testing MOVEit Transfer bug since 2021 Stealth Soldier backdoor used is targeted espionage attacks in Libya Researchers published PoC exploit code for actively exploited Windows elevation of privilege issue Experts detail a new Kimsuky (..)