Tag Archive for: Mac’

Hackers use pirated software to hijack Mac, Android, and Windows devices


Trading in cryptocurrency? You might be sitting on a pretty penny in that digital wallet of yours. Feels great, doesn’t it? But here’s the catch with digital currency: keeping it secure isn’t a walk in the park.

Hackers are out there, working overtime to come up with new tricks to swipe your crypto, potentially emptying your wallet in one fell swoop. Yep, for these cyber thieves, your digital cash is the ultimate prize. And the worst part? Most of the time, you won’t even realize you’ve been hit until your balance is zero.

Case in point: there’s this fresh malware out there, specifically targeting macOS, Android, and Windows devices. It sneaks in through pirated software, hunting for your cryptocurrency to make it its own. Here’s how it works.

What is the new malware targeting cryptocurrency users?

The cybersecurity company Kaspersky has uncovered a sophisticated new malware campaign designed to pilfer cryptocurrency from users’ wallets. This campaign leverages pirated or improperly licensed software as a vector for infection, exploiting the common practice of seeking out ‘free’ versions of paid software online.

These cracked applications, distributed through unauthorized websites, are embedded with a Trojan-Proxy type of malware. This malware is not limited to just macOS users, as recent findings have shown; variants targeting Android and Windows platforms have also been discovered, connecting to the same Command and Control (C&C) server. These variants, like their macOS counterparts, are concealed within cracked software, illustrating the widespread risk across different operating systems.

Once the malware is downloaded into your device, it’ll immediately start checking for Bitcoin and Exodus cryptocurrency wallets. If it discovers either one (which is very unfortunate for some users who have both), the malware replaces the wallet and infects it with another version that’s able to steal the cryptocurrency. For some people, this could amount to thousands of dollars. And, it’s all because you unintentionally downloaded the malware to your macOS, Android, and Windows devices.

MORE: HOW CROOKS ARE USING SKIMMERS AND SHIMMERS TO STEAL YOUR MONEY AT…

Source…

Intego Mac Internet Security X9 Review


Source…

Opera MyFlaw Bug Could Let Hackers Run ANY File on Your Mac or Windows


Jan 15, 2024NewsroomVulnerability / Browser Security

Opera MyFlaw Flaw

Cybersecurity researchers have disclosed a security flaw in the Opera web browser for Microsoft Windows and Apple macOS that could be exploited to execute any file on the underlying operating system.

The remote code execution vulnerability has been codenamed MyFlaw by the Guardio Labs research team owing to the fact that it takes advantage of a feature called My Flow that makes it possible to sync messages and files between mobile and desktop devices.

“This is achieved through a controlled browser extension, effectively bypassing the browser’s sandbox and the entire browser process,” the company said in a statement shared with The Hacker News.

The issue impacts both the Opera browser and Opera GX. Following responsible disclosure on November 17, 2023, it was addressed as part of updates shipped on November 22, 2023.

My Flow features a chat-like interface to exchange notes and files, the latter of which can be opened via a web interface, meaning a file can be executed outside of the browser’s security boundaries.

Cybersecurity

It is pre-installed in the browser and facilitated by means of a built-in (or internal) browser extension called “Opera Touch Background,” which is responsible for communicating with its mobile counterpart.

This also means that the extension comes with its own manifest file specifying all the required permissions and its behavior, including a property known as externally_connectable that declares which other web pages and extensions can connect to it.

Opera MyFlaw Flaw

In the case of Opera, the domains that can talk to the extension should match the patterns “*.flow.opera.com” and “.flow.op-test.net” – both controlled by the browser vendor itself.

“This exposes the messaging API to any page that matches the URL patterns you specify,” Google notes in its documentation. “The URL pattern must contain at least a second-level domain.”

Guardio Labs said it was able to unearth a “long-forgotten” version of the My Flow landing page hosted on the domain “web.flow.opera.com” using the urlscan.io website scanner tool.

Opera MyFlaw Bug

“The page itself looks quite the same as the current one in production, but changes lie under the hood: Not only that it…

Source…

ESET Cyber Security for Mac Review


It’s true that thanks to baked-in security, Macs have more innate malware resistance than Windows or Android devices. However, that doesn’t mean they’re immune, just that malware coders must work harder. That work pays off when their insidious creations infest a Mac whose owner blithely dismissed antivirus protection as irrelevant. ESET Cyber Security for Mac is ESET’s nod to Mac antivirus protection. However, the labs don’t vouch for it, real-world phishing sites evade its detection, and its bonus features have vanished. You’re better off choosing one of our Mac antivirus Editors’ Choice picks, Bitdefender Antivirus for Mac or Norton 360 Deluxe for Mac instead.


How Much Does ESET Cyber Security for Mac Cost?

Like ESET NOD32 Antivirus, ESET Cyber Security costs $39.99 per year for one license and $5 per year apiece for each additional license, up to five. In fact, your licenses for this antivirus and NOD32 are interchangeable.

ESET’s pricing is in line with the competition. Bitdefender, G Data Antivirus for Mac, and Trend Micro are among the other macOS antiviruses that start at just under $40 per year. With McAfee, you pay $64.99 per year, but that lets you install protection on all the devices in your household, whether they run Windows, macOS, iOS, Android, or ChromeOS.

Since 1982, PCMag has tested and rated thousands of products to help you make better buying decisions. See how we test.

With ESET, you pay $59.99 for five licenses. F-Secure and Webroot Antivirus for Mac charge $79.99 for five, while Intego costs $84.99. A $119.99 yearly Norton subscription gets you five cross-platform licenses, five no-limits VPN licenses, and 50GB of storage for your (Windows) backups. In general, the higher-priced editions come with significant bonus features.

PCMag Logo It’s Surprisingly Easy to Be More Secure Online

ESET Cyber Security works with macOS versions back to 11 (Big Sur), the same as F-Secure and Trend Micro. Mac users typically stay up to date, but if you’re stuck with an antique macOS version, perhaps due to old hardware, you might consider Intego, which extends support back to 10.9 (Mavericks), or ProtectWorks AntiVirus for Mac, which works with 10.6…

Source…