Skip to main content

Apple mistakenly verified a macOS malware

A malware Mac package slipped past Apple’s verification process, a new report finds. As per security researcher, Patrick Wardle, Apple inadvertently approved a malicious desktop app that was disguised as an Adobe Flash installer to trick users.

Apple allows Mac users to install apps from sources outside of its own App Store. However, to ensure this policy doesn’t end up infesting Macs with viruses and malware, the company has a process called “notarization” that scans apps for security issues. Developers are required to submit their code prior to distribution for approval. If an app is unable to get past this verification stage, it is automatically blocked by Mac’s built-in screening program, Gatekeeper — irrespective of where it was downloaded from.

Wardle discovered that a popular malware called Shlayer, which security firm Kaspersky labeled as the most common threat that Macs faced in 2019, featured snippets of code that were officially notarized by Apple. Therefore, if someone downloaded and tried to run this on their Mac, they wouldn’t be alerted through any warnings. Shlayer is an adware that can intercept your web traffic and replace the webpages you try to load with its own malicious ads.

Apple’s review process couldn’t detect the malware and green-lighted it to run on all macOS versions, even Big Sur that is currently in beta.

“As far as I know, this is a first: malicious code gaining Apple’s notarization ‘stamp of approval’,” Wardle wrote in the blog post.

Since it was reported, Apple says it has patched and revoked the notarized payloads. Soon after that, however, the same group of attackers somehow released a new, notarized package — which Apple confirmed has been banned as well.

“Malicious software constantly changes, and Apple’s notarization system helps us keep malware off the Mac and allows us to respond quickly when it’s discovered,” Apple commented in a statement to Digital Trends. “Upon learning of this adware, we revoked the identified variant, disabled the developer account, and revoked the associated certificates. We thank the researchers for their assistance in keeping our users safe.”

Editors' Recommendations

Shubham Agarwal
Shubham Agarwal is a freelance technology journalist from Ahmedabad, India. His work has previously appeared in Firstpost…
How long do MacBooks last? Here’s when you’ll need to buy again
The M3 MacBook Air in front of a window.

There’s no doubt that Apple’s best MacBooks have a reputation for long-lasting quality, but what sort of longevity can you expect to get out of one? And just how long will Apple continue to support your laptop? Finally, what are the differences between the MacBook Air and the MacBook Pro?

These are no doubt important questions to consider when buying a new MacBook or even considering an upgrade. Here's everything you know about the longevity of your MacBook.
Lifespan of MacBook hardware

Read more
Here are 5 macOS 15 features that I can’t wait to see
Apple CEO Tim Cook walks off stage after speaking during the Apple Worldwide Developers Conference.

Apple’s Worldwide Developers Conference (WWDC) is less than a month away, meaning it’ won't be long before we find out exactly what sort of updates are coming to macOS 15. It’s always an exciting time for Mac users, as we get to find out what Apple is doing to tune up its operating systems and improve the Mac experience for all of us.

By this stage, we’ve already seen a bunch of intriguing leaks hinting at what’s coming in macOS 15. There are a few things I really want Apple to fix, as well as plenty of cool features heading our way if the rumors prove to be correct.

Read more
Why Samsung’s answer to the MacBook Pro can’t quite compete
The Galaxy Book4 Ultra open on a wooden suruface.

The 16-inch MacBook Pro is the king of the creator laptops, and it's been that way for several years.

But there have been a wave of new Windows laptops attempting to challenge the MacBook Pro on its own terms. The Samsung Galaxy Book4 Ultra is certainly a contender, packing some impressive specs in a portable chassis. When you compare the two straight up, the MacBook Pro 16-inch clearly comes away with the upper hand, even when considering its higher price.
Specs and pricing

Read more