via News – MySmartPrice https://ift.tt/2Q2sb1y
Monday, August 17, 2020
New Mac Malware Found to Infect via Xcode
https://ift.tt/3g5cPUE
Security researchers at Micro Trend have discovered a new kind of Mac malware which can "command and control" a target system.
The researchers described the malware, which is part of the XCSSET family, as "an unusual infection related to Xcode developer projects." The malware is unusual because it is injected into Xcode projects, and when the project is built, the malicious code is run. A developer's Xcode project was found to be able to contain the malware, which "leads to a rabbit hole of malicious payloads."
The discovery poses a significant risk for Xcode developers. Micro Trend identified developers affected by the malware who share their projects via GitHub, leading to a potential supply-chain attack for users who rely on repositories for their own projects. Google's VirusTotal scanning software managed to identify the malware, which indicates the threat is at large.
The malware spreads via infected Xcode projects because it can create maliciously modified applications. Specifically, the malware was found to be capable of abusing Safari and other browsers to steal data. It can use a vulnerability to read and dump cookies, create backdoors in Javascript, and in turn modify displayed websites, steal private banking information, block password changes, and steal newly modified passwords. It was also found to be able to steal information from apps such as Evernote, Notes, Skype, Telegram, QQ, and WeChat, take screenshots, upload files to the attacker's specified server, encrypt files, and display a ransom note.
Affected developers may unwittingly distribute the trojan to their users in the form of compromized Xcode projects and built applications. The malware is particularly dangerous because verification methods, such as checking hashes, would not identify infection as the developers would be unaware that they are distributing malicious files.
To protect against this type of threat, Micro Trend encourages users to only download apps from official marketplaces and consider multilayered security solutions.
This article, "New Mac Malware Found to Infect via Xcode" first appeared on MacRumors.com
Discuss this article in our forums
from MacRumors: Mac News and Rumors - All Stories https://ift.tt/348rxIu
Security researchers at Micro Trend have discovered a new kind of Mac malware which can "command and control" a target system.
The researchers described the malware, which is part of the XCSSET family, as "an unusual infection related to Xcode developer projects." The malware is unusual because it is injected into Xcode projects, and when the project is built, the malicious code is run. A developer's Xcode project was found to be able to contain the malware, which "leads to a rabbit hole of malicious payloads."
The discovery poses a significant risk for Xcode developers. Micro Trend identified developers affected by the malware who share their projects via GitHub, leading to a potential supply-chain attack for users who rely on repositories for their own projects. Google's VirusTotal scanning software managed to identify the malware, which indicates the threat is at large.
The malware spreads via infected Xcode projects because it can create maliciously modified applications. Specifically, the malware was found to be capable of abusing Safari and other browsers to steal data. It can use a vulnerability to read and dump cookies, create backdoors in Javascript, and in turn modify displayed websites, steal private banking information, block password changes, and steal newly modified passwords. It was also found to be able to steal information from apps such as Evernote, Notes, Skype, Telegram, QQ, and WeChat, take screenshots, upload files to the attacker's specified server, encrypt files, and display a ransom note.
Affected developers may unwittingly distribute the trojan to their users in the form of compromized Xcode projects and built applications. The malware is particularly dangerous because verification methods, such as checking hashes, would not identify infection as the developers would be unaware that they are distributing malicious files.
To protect against this type of threat, Micro Trend encourages users to only download apps from official marketplaces and consider multilayered security solutions.
This article, "New Mac Malware Found to Infect via Xcode" first appeared on MacRumors.com
Discuss this article in our forums
from MacRumors: Mac News and Rumors - All Stories https://ift.tt/348rxIu
Samsung Galaxy M01 to be Available at a Discounted Price on Amazon, Sale Begins Tomorrow
via News – MySmartPrice https://ift.tt/2Y82am8
Nokia 7.3 Allegedly Spotted at Upcoming James Bond Movie Set
via News – MySmartPrice https://ift.tt/3atJlyC
App Recap: Heart Reports, HibiDo, and Weather on the Way
https://ift.tt/2FpeyaM
In this week's App Recap, we've highlighted health and fitness app "Heart Reports," productivity app "HibiDo: To-Do List & Notes," and weather app "Weather on the Way" as three apps that are worth checking out.
Are you using a great new app we've missed? Let us know in the comments and we'll check it out for next week's App Recap. Are you a developer of a unique app you'd like us to consider? Send us a message through our tip line at the top of the page and we'll check it out.
This article, "App Recap: Heart Reports, HibiDo, and Weather on the Way" first appeared on MacRumors.com
Discuss this article in our forums
from MacRumors: Mac News and Rumors - All Stories https://ift.tt/2Y8Na7p
In this week's App Recap, we've highlighted health and fitness app "Heart Reports," productivity app "HibiDo: To-Do List & Notes," and weather app "Weather on the Way" as three apps that are worth checking out.
Apps to Check Out
- Heart Reports (iOS, $1.99) - Heart Reports is an app that lets users generate reports based on data from the Health app. Several forms of data can be aggregated into a report like heart rate, number of steps, sleep time, calories burned, blood sugar and pressure (if entered into the Health app), and more. As for privacy, all data is handled offline within the app. Heart Reports provides an easy way to export data, as all generated reports can be created and stored in either a PDF or a CSV file.
- HibiDo: To-Do List & Notes (iOS, Subscription) - HibiDo features an easy way to manage tasks and notes together in a single app. Reminders can be customized with a deadline, priority flag, checklist, note, or by being designated as a recurring task. Users can subscribe to the app's premium version priced at $1.49 per month or $15.99 per year to access collaboration and sharing features, a sync across multiple devices, automatic note backup, and the creation of an unlimited number of tasks and notes.
- Weather on the Way (iOS, Subscription) - Weather on the Way lets users enter a start and end point for a trip, and the app will intelligently display detailed weather information like temperature, precipitation, and wind speed at any point. This can be useful when planning for the best possible time to travel. Once trip details have been entered, users can select a route with the best weather. The app's developers have emphasized the importance of user privacy, as the app doesn't collect any personal information as well as location or driving route data. Weather on the Way is free to download, but some features like alternative routes, road visibility, wind speed, and UV index are limited subscribed of the app's Pro plan. The Pro plan is available in monthly and annual subscription options as well as a lifetime purchase priced at $0.99, $9.99, and $29.99 respectively.
Are you using a great new app we've missed? Let us know in the comments and we'll check it out for next week's App Recap. Are you a developer of a unique app you'd like us to consider? Send us a message through our tip line at the top of the page and we'll check it out.
Tag: App Recap
This article, "App Recap: Heart Reports, HibiDo, and Weather on the Way" first appeared on MacRumors.com
Discuss this article in our forums
from MacRumors: Mac News and Rumors - All Stories https://ift.tt/2Y8Na7p
Sunday, August 16, 2020
Motorola Moto E7 Plus Specifications Leaked, Could be the First Smartphone to Feature Snapdragon 460 SoC
via News – MySmartPrice https://ift.tt/3asYmRt
ZTE Axon 20 with World’s First Under Screen Camera to Launch on September 1: Expected Price, Specifications
via News – MySmartPrice https://ift.tt/2Y9ZwMN
Subscribe to:
Posts (Atom)