ibusinesslines.com November 15, 2018

Beware! These Mac apps might be stealing your data

12 September 2018, 01:24 | Jodi Jackson

Beware! These Mac apps might be stealing your data

To many the app hardly looked suspicious having received more than 7,200 ratings- many of which gave it five stars. It was listed next to other utility apps like Final Cut Pro and Logic Pro X

It's emerged that a number of apps from the Mac App Store have been secretly gathering user data and uploading it to remote servers. Apple then removed both Dr Unarchive and Dr Cleaner from the App Store for violating the rules.

However, it was able to return to the app store after it changed its name to Adware Doctor. Until removal, all products were top-sellers, with thousands of positive reviews that averaged their ratings between 4.6 and 4.9. At least a handful of apps available for Mac users that ask for that permission are using that access to steal user data such as browsing history and then upload that history to analytics servers.

Adware Medic was a direct copy of an app developed by Malwarebytes.

Until Reed's post, that is. Inspection of the files showed access to recent Google searches on Safari, Chrome, and Firefox, as well as browser history, a complete list of apps on the system including the download location for the apps.

iOS developer and 9to5Mac writer Guilherme Rambo found that Trend Micro's Dr. Unarchiver was also siphoning user data. The process of stealing user data starts after unzipping the app and the user seeing an offer to "Quick Clean Junk Files". He notes that he worked closely with @privacyis1st to compile the report. Also, the researcher did not have a chance to look closer into this, but from his experience with analyzing APT malware, this looks like a valid theory.

After this came to light, Apple pulled the apps from the store.

The apps' behaviour was noticed by a security researcher last week.

We reached out to Trend Micro for a statement on the matter but received no reply at the time of publishing. Apple is making some privacy improvements in macOS Mojave which should prevent apps from stealing a user's browsing history but given how a company lays so much emphasis on the privacy and security of its users, this should not have happened in the first place.

The two apps that users say are guilty of this are called "Dr. Unarchiver" and "Dr".

The firm said this was done for "security purposes", in order to analyse whether a user had recently encountered adware or other threats.

Trend Micro is yet to explain the connection with shady apps from other developers and why the its products were removed from the App Store.

Other News

Trending Now

20,336 murders recorded in South Africa in one year
Western Cape police stations recorded the highest number of murder reports‚ followed by those in Gauteng. He said three out of the seven crime categories decreased.

Arthur makes Brazil bow as Neymar & Firmino down the United States
Arthur made his Brazil debut in the 60th minute, Lucas Paqueta in the 70th, Richarlison in the 75th and Everton in the 80th. Neymar stutter-stepped in his run-up, Steffen dove to his right and the striker softly kicked the ball in the other way.

Steve Yzerman stepping aside as Lightning GM
May 2011: The Lightning reach the Eastern Conference Final in Yzerman's first season as general manager. Current Red Wings general manager Ken Holland signed a two-year deal this summer to remain at the helm.

Trump Knocks Woodward Book As ‘Total Joke,’ Vows To Write ‘Real Book’
The Trump administration has been on an offensive in recent weeks, seeking to discredit Woodward and the contents of his book. Woodward said that in the Central Intelligence Agency , agents are taught to "let the silence suck out the truth".

At least 19 killed in South Sudan plane crash
Among the three survivors, a 6 year old child, a man of adult age and a European now hospitalized in a critical condition. The aircraft was carrying passengers from Juba International Airport to the city of Yirol when it crashed.

More To Blame Than Mary Jane As Musk Inhales Tesla's Woes
Tesla shares have also been hit by a round of short selling, sparking more angry tweets , and have dipped accordingly. It takes more than a toke on a joint by a CEO to bring down a company these days - and Tesla is no different.

Woodward: Trump Is 'Detached' From Reality, Jeopardizes National Security
For instance, Woodward writes in Fear , Trump wanted to withdraw from a key trade agreement with South Korea in September 2017. The publisher, Simon & Schuster, said Monday that it is printing one million copies of the book to keep up with reader demand.