Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Scareware Signed With Apple Cert Targets OS X Machines
Threatpost ^ | February 5, 2016 , 11:31 am | Michael Mimoso

Posted on 02/06/2016 7:24:03 PM PST by Utilizer

A unique scareware campaign targeting Mac OS X machines has been discovered, and it's likely the developer behind the malware has been at it a while since the installer that drops the scareware is signed with a legitimate Apple developer certificate.

"Sadly, this particular developer certificate (assigned to a Maksim Noskov) has been used for probably two years in similar attacks," said Johannes Ullrich, dean of research of the SANS Institute's Internet Storm Center, which on Thursday publicly disclosed the campaign. "So far, it apparently hasn't been revoked by Apple."

Ullrich said he happened upon the scam while investigating some click-bait links on Facebook, below. One led him to emgn[.]com that he says was likely hosting a malicious ad that served a pop-up warning that his Adobe Flash Player was out of date. Ullrich was using a clean default install of OS X 10.11 in a virtual machine, and Flash was not installed on the image.

(Excerpt) Read more at threatpost.com ...


TOPICS: Computers/Internet
KEYWORDS: apple; mac; malware; osx
Navigation: use the links below to view more comments.
first previous 1-2021-29 last
To: Aliska

Run windows on your mac.


21 posted on 02/06/2016 11:15:26 PM PST by for-q-clinton (If at first you don't succeed keep on sucking until you do succeed)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Swordmaker

“The newest Safari browser allows you to silence players on the tab so you don’t have to go hunting for what’s playing.”

Where do I find this magical silencer?


22 posted on 02/07/2016 5:33:39 AM PST by Not gonna take it anymore (If Obama were twice as smart as he is, he would be a wit)
[ Post Reply | Private Reply | To 20 | View Replies]

To: Not gonna take it anymore
“The newest Safari browser allows you to silence players on the tab so you don’t have to go hunting for what’s playing.”

Where do I find this magical silencer?

If you're running El Capitan (it's possible that the Safari upgrade is also available on older versions of Mac OS), you'll see an icon like this in the tabs bar for any tab that's making noise. Click the icon to mute it without switching to that tab. It's my favorite new feature of EC.

23 posted on 02/07/2016 8:30:58 AM PST by ReignOfError
[ Post Reply | Private Reply | To 22 | View Replies]

To: Not gonna take it anymore
Where do I find this magical silencer?

When something is playable on a tab, it will have an active speaker icon shown on the right of the tab. Click on the speaker and a line will appear through that speaker, turning off any sound from the noisy noisemakers on that website. It has been an embarrassment saver several times when I've been making a presentation with several tabs open.

Of course, if you still have three dozen tabs open or two or three Safari windows, you will still have a problem finding the active speaker icon.

24 posted on 02/07/2016 9:52:58 AM PST by Swordmaker (This tag line is a Microsoft insult free zone... but if the insults to Mac users continue....)
[ Post Reply | Private Reply | To 22 | View Replies]

To: Swordmaker
Looks as though Ad Block Plus is looking to move to a possible industry deal given certain compromises by advertisers. http://news.yahoo.com/adblock-plus-scourge-websites-seeks-industry-deal-054819346.html;_ylt=AwrC1CnQVLdWzlQAWc_QtDMD;_ylu=X3oDMTByNXM5bzY5BGNvbG8DYmYxBHBvcwMzBHZ0aWQDBHNlYwNzcg--

btw i did download and load Ad-Block Plus. Very effective. The only problem I am seeming to have as a result is page load times (only on certain pages and searches.) Also uninstalled Adobe Flash. Appreciate the recommendations. :)

25 posted on 02/07/2016 7:54:39 PM PST by GOP Poet
[ Post Reply | Private Reply | To 20 | View Replies]

To: Nailbiter

flr


26 posted on 02/07/2016 7:56:29 PM PST by Nailbiter
[ Post Reply | Private Reply | To 1 | View Replies]

To: Aliska

“I’ll let you know what I’ve done”

Let me know how it turns out.


27 posted on 02/07/2016 8:10:34 PM PST by garjog (Obama: bringing joy to the hearts of Terrorists everywhere.)
[ Post Reply | Private Reply | To 19 | View Replies]

To: ReignOfError; Swordmaker

Thanks, I’ll look for that.


28 posted on 02/08/2016 5:29:46 AM PST by Not gonna take it anymore (If Obama were twice as smart as he is, he would be a wit)
[ Post Reply | Private Reply | To 23 | View Replies]

To: garjog

Thanks. Self ping for later...


29 posted on 02/08/2016 5:35:14 AM PST by FourtySeven (47)
[ Post Reply | Private Reply | To 5 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-29 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson