![]() As in the case with the present rogue installer, the previous OSX/InstallCore was also signed with a Developer ID certificate, which made the update look legitimate to Mac Gatekeeper.Īs a sort of security measure imposed by Apple on all Mac users, applications that do not come from its official app store will be blocked from the OS X ecosystem in order to help malicious code from spreading in the computer. ![]() There was an earlier version of the OSX/InstallCore that Intego also spotted in the wild, which led to the spread of a scareware after Mac users fell for the same deceptive tactic exploiting a fake Adobe Flash update. These include the MacKeeper, ZipCloud and MegaBackup, third-party applications that otherwise would not be allowed by Apple to get their way into the OS X ecosystem had there not been a legitimate Developer ID certificate. Following installation of the update, Mac users began to see a proliferation of unwanted programs in their computers such as those detected by Intego researchers. ![]() The presence of the Developer ID certificate was the main reason the Mac OS X Gatekeeper was made to trust in the otherwise rogue installer.
0 Comments
Leave a Reply. |