macOS users targeted with new Tarmac malware

guest · Oct 11, 2019

macOS users targeted with new Tarmac malware
Tarmac malware deployed via malvertising campaigns across the US, Italy, and Japan
October 11, 2019
https://www.zdnet.com/article/macos-users-targeted-with-new-tarmac-malware/

Security researchers have discovered a new piece of Mac malware; however, some of its purpose and full features will remain a mystery for a little longer.
Named Tarmac (OSX/Tarmac), this new malware was distributed to macOS users via online malvertising (malicious ads) campaigns.

These malicious ads ran rogue code inside a Mac user's browser to redirect the would-be victim to sites showing popups peddling software updates -- usually for Adobe's Flash Player.
DISTRIBUTED SINCE JANUARY 2019
This malvertising campaign distributing the Shlayer+Tarmac combo started in January this year, according to Taha Karim, a security researcher at Confiant.
All that's known at the moment is that after Shlayer downloads and installs Tarmac on infected hosts, Tarmac gathers details about a victim's hardware setup and sends this info to its command and control server.
Click to expand...

While the US and Japan are regular targets for malvertising and malware campaigns, Italy is somewhat of an odd choice.

"We think actors proceed by trial and error, and they might have found a sweet spot in Italy, between the profit they can reap and the level of attention from the security community," Karim told ZDNet.
Since Tarmac payloads come signed by legitimate Apple developer certificates, features like Gatekeeper and XProtect won't stop its installation or show any errors.
Click to expand...

Report: OSX/Shlayer new Shurprise.. unveiling OSX/Tarmac

Log in or Sign up

macOS users targeted with new Tarmac malware

guest Guest

Log in or Sign up

macOS users targeted with new Tarmac malware

guest Guest

Useful Searches