Skip to main content

Apple allowed spyware posing as anti-malware tool into its Mac App Store

Apple MacBook Pro OLED with Touch Bar
Malarie Gokey/Digital Trends

One of the top paid utilities in the Mac App Store that claims to protect your Apple computer against malware is actually spyware in disguise that does just the opposite. The app, Adware Doctor, retails for $5 on Apple’s online storefront, and security researchers discovered that the malicious app actually collects your browsing history across the Safari, Chrome, and Firefox browsers and sends that data to a China-based server.

Originally, the app was posed as Adware Medic, sharing a similar name to the AdwareMedic app that was acquired by Malwarebytes, forcing Apple to remove the copycat. However, after it changed its name to Adware Doctor, Apple allowed the app back into the Mac App Store, and the app has garnered a number of likely fake five-star reviews. Security researcher Patrick Wardle with Privacy 1st claimed that he notified Apple about the app’s malicious behavior, according to a report on 9to5 Mac. Apple removed the app after numerous tech publications reported on the app’s behavior on Friday, September 7.

Recommended Videos

In addition to sending your browsing history to China, Adware Doctor also has access to your iTunes search history as well as other apps that are installed on the Mac. Because it poses as an app designed to scan your Mac for malware and spyware, Adware Doctor was able to overcome the sandbox protections on the Mac. Wardle discovered that the app requested universal access on first run, which gave it access to information found from within other apps, like browsing history data on Safari. Apple claims that the release of MacOS Mojave this fall will bring new privacy protections designed to prevent apps like Adware Doctor from accessing Safari browsing history.

However, Wardle noted that the app does actually clear your browser of adware, and the app’s data collection stopped a few days ago, PCMag reported. 9to5 Mac reported that the server in China is now offline, but there’s still a chance it could resume operation.

Adware Doctor’s entry in Apple’s official Mac App Store should be cause for concern for consumers. Even if the app is highly rated — Adware Doctor came with more than 6,000 positive reviews — users should always research an app and the developer before installing anything from the internet, regardless of where it comes from. This incident follows an earlier report this week of a rogue Chrome browser extension. A fake extension was uploaded to Google’s Chrome webstore after the original developer was hacked, allowing the hackers to gain access to its users’ logins to other sites and services.

According to Malwarebytes‘ director of Mac and mobile Thomas Reed, the firm has worked with Apple numerous times in the past to remove fake apps, but these apps will reappear as a new version with a new name before long. “It’s blindingly obvious at this point that the Mac App Store is not the safe haven of reputable software that Apple wants it to be,” he said.

Chuong Nguyen
Silicon Valley-based technology reporter and Giants baseball fan who splits his time between Northern California and Southern…
Window management in macOS annoys me. This free app was the fix I needed
Swift Shift app running on a MacBook.

Apple’s approach to Mac computing is rather odd. The unwavering focus on simplicity, fluidity, and elegance sets it apart from Windows. But at the same time, it can feel a lot restrictive. Nothing exemplifies that better than app windows in macOS.

Until macOS Sequoia, Apple didn’t even offer proper window tiling and snapping options. Windows has served them for a while now, and in a fashion that even power users would approve. 

Read more
I’m intrigued by Apple’s weird keyboard idea that could change how you use your MacBook
Apple MacBook Air 13 M4 top down view showing keyboard and touchpad.

Ever since I tried my first mechanical keyboard many moons ago, I’ve been totally sold on clicky switches and chunky keycaps. I use a mechanical keyboard for both my Mac and my PC, and typing on Apple’s Magic Keyboard, as good as it is, just feels weird to me these days.

That means that when I saw that Apple has been granted a patent for a weird new keyboard concept, my ears immediately pricked up.

Read more
I finally found the perfect mechanical keyboard to go with my Mac, and it’s a lot cheaper
Angled view of a person typing on the Satechi SM3 Slim mechanical keyboard.

My experience with Apple’s Magic Keyboard for the Mac has been a love-hate situation, at best. It is slim, sleek, offers a fantastic scissor-switch, and serves the Touch ID convenience. What’s not to love? 

Well, for starters, the asking price is a steep $200, which is too much for a non-mechanical keyboard. There is no backlight. It is not ergonomic. The looks, though understated, are bland.  

Read more