Malware News Mac malware intercepts encrypted web traffic for ad injection

[LASER_oneXM]

Content source

https://blog.malwarebytes.com/threat-analysis/2018/10/mac-malware-intercepts-encrypted-web-traffic-for-ad-injection/

Last week, Malwarebytes researcher Adam Thomas found an interesting new piece of Mac malware that exhibits some troubling behaviors, including intercepting encrypted web traffic to inject ads. Let’s take a closer look at this adware, which Malwarebytes for Mac detects as OSX.SearchAwesome, to see how it’s installed, its behavior, and the implications of this kind of attack.

Installation
The malware is found on a rather bland disk image file, without any of the usual decorations that could make it look like a legitimate installer.
...
....