Trend Micro analysed a sample and found that it also downloaded and automatically executed three files including what appeared to be an installer for Adobe Flash but was actually adware. It is not clear what this information is used for.
#Exe to jpg for mac serial number#
Interestingly, the malicious EXE files will not run on Windows because they are specifically designed to infect Macs.Īfter being installed successfully, the malware sends identifying system information including the serial number of the infected Mac and its hardware and software configuration to a remote server. Users would otherwise have to have Mono installed already, which would significantly reduce this malware's ability to infect Macs. The malware cleverly includes the Mono framework within the downloaded package. Researchers have found this malware being distributed as several commonly pirated macOS apps including Little Snitch, a firewall the Traktor Pro 2 DJ software Paragon NTFS, which is widely used to access hard drives formatted for Windows and Wondershare's Filmora video editing suite.
It is not believed to have been specifically targeted at any region or type of user. The threat, which does not have a specific name, has been confirmed by Trend Micro to have struck Macs in the US, UK, Australia, South Africa, and Europe. Once installed, it contacts a remote server, reports your system information, and downloads whatever additional malware the author wants to send. The malware has been found in pirated versions of popular Mac apps that are being distributed as Torrents. The malware, however, does execute these files using a software framework called Mono which is designed to enable cross-platform app development. This allows it to evade detection by Apple's own Gatekeeper security tool, since Windows EXE files are typically disregarded because of their inability to run.
Trend Micro Security has discovered a new form of malware that targets macOS but masquerades as a Windows executable file.
0 kommentar(er)
