Skip to main content

Digital Trends may earn a commission when you buy through links on our site. Why trust us?

This MacOS Trojan stealthily lifts your data, says Microsoft

You might think that your Mac is invulnerable to viruses and other security threats, but you might want to think again. As part of its commitment to intelligence sharing and collaboration, Microsoft recently exposed the evolution of a MacOS Trojan that can stealthily lift your personal data.

First spotted in September 2020, Microsoft says this piece of malware, known as UpdateAgent,  has increasingly progressed to “sophisticated capabilities.” Though it also indicated that the latest two versions are still more “refined,” Microsoft does warn that the malware is again being developed, and more updates could come soon.

MacBook on a chair with the TV app on the screen.
Image used with permission by copyright holder

It is so bad, that Microsoft believes this malware can be leveraged to fetch more dangerous payloads beyond just the adware that it is already injecting into victim machines.

Recommended Videos

But how does it work? Per Microsoft, the UpdateAgent malware can impersonate real software, and then take Mac functionalities under its own control. It is usually first installed to victim Macs by automated downloads without a user’s consent, or advertisement pop-ups, which impersonate video applications and support agents. UpdateAgent can even bypass Gatekeeper, which usually makes sure that only trusted apps can run on Macs. The Malware then takes over a machine and performs malicious acts like injecting adware.

Microsoft worked with Amazon Web Services to pull the URLs used by UpdateAgent to inject adware, but the UpdateAgent campaign has steadily evolved. It went from basic information stealer in December 2020, to the ability to fetch and deliver .DMG files in February 2021, to being able to fetch and deliver .ZIP files in March 2021.

Later in August, the malware expanded its reconnaissance function to scan and collect System_profile and SPHardwaretype information from victim machines. At its worst point in August, the malware even used permissions and wrote its own code to trick Gatekeeper into thinking it’s not even there.

“UpdateAgent is uniquely characterized by its gradual upgrading of persistence techniques, a key feature that indicates this trojan will likely continue to use more sophisticated techniques in future campaigns,” Microsoft said Microsoft.

Microsoft wasn’t clear which versions of MacOS are impacted by UpdateAgent, but it did have some advice that goes beyond using antivirus software. It pointed to using the Microsoft Edge browser, which can block and scan for malicious websites. Other tips include restricting access to privileged resources, installing apps only from the app store, and running the latest versions of MacOS and other applications.

Arif Bacchus
Arif Bacchus is a native New Yorker and a fan of all things technology. Arif works as a freelance writer at Digital Trends…
I tried a $5 scratchpad app for the Mac. I’ll never go back to Apple Notes
Summoning a scratchpad in the Antinote app for macOS.

I have missed more transitory ideas than I can count while absorbed in work. Or missed deadlines. Or forgot minor chores. On a few occasions, I was just too lazy to reach out for my iPhone, open a to-do app, create a new page, and type in. You feel the flow here, right?

On other occasions, I just lost my train of thought mid-way through it all. Often, an app just doesn’t have the functions I need for that fleeting, low-stakes note-taking job. Then there’s the load of “yet another app” taking up precious screen space. 

Read more
Apple could soon fix Wi-Fi access woes across all your devices
Setting up Wi-Fi on an iPhone.

One of the biggest hassles while traveling is the hunt for a decent internet connection, and then getting it to work across all your devices. The conundrum is now mainstream across hotels, lodges, and coffee shops — essentially all the establishments a person is supposed to spend a few hours of their day, but needs to fill a web form first before they can get internet access.

Apple will soon put an end to those Wi-Fi registration struggles. According to Bloomberg, the company is working on “a system that can synchronize captive Wi-Fi access details across the iPhone, iPad and Mac.”

Read more
Window management in macOS annoys me. This free app was the fix I needed
Swift Shift app running on a MacBook.

Apple’s approach to Mac computing is rather odd. The unwavering focus on simplicity, fluidity, and elegance sets it apart from Windows. But at the same time, it can feel a lot restrictive. Nothing exemplifies that better than app windows in macOS.

Until macOS Sequoia, Apple didn’t even offer proper window tiling and snapping options. Windows has served them for a while now, and in a fashion that even power users would approve. 

Read more