Snaek Mac OS
Snake is a known malware on Windows OS since 2008. In 2017 fox-it found a variant of this malware that was ported to macOS.The malware arrived as the file “Install Adobe Flash Player.zip” which is a modify version of Adobe Flash installation. Within the zip file there is a macOs application bundle signed with a legitimate Apple Developer ID (revoked already):
- Apple MAC OS X 10.4 Exam 9L0-060 Guide 2.0: 2.9 MB: Shareware: $9: Get at www.ePlanetLabs.com Apple MAC OS X 10.4 9L0-060, certification, exam, Apple MAC OS X 10.4 (9L0-060) MAC OS X 10.4 service and support, syllabus, sample question, Braindumps sample questions, certifications books study guide, certification exam notes, study material, study materials, sample tests, sample questions.
- Snake is a known malware on Windows OS since 2008. In 2017 fox-it found a variant of this malware that was ported to macOS.The malware arrived as the file “Install Adobe Flash Player.zip” which is a modify version of Adobe Flash installation.
Source: CheckPoint
A'Macs Snack Shack, Converse, Texas. 615 likes 7 talking about this 488 were here. Home Cooking Food. Title Developer/publisher Release date Genre License Mac OS versions A-10 Attack! Parsoft Interactive 1995 Flight simulator Abandonware 7.5–9.2.2.
Once executed the malware will execute its script first prior the real Adobe installation. It will use AppleScript in order to execute its infection script with administrator permissions:
Top-down Snake game for Macintosh. System 6 to Mac OS 9. Written in 1991 by Thomas Schulze, using Think C 4.0, in Mawson A.C.T. Eat flies, flowers and golden eggs. Unlock doors to proceed to other areas of the game. Grow bigger and try not to eat yourself too much! Favorite favorite favorite favorite favorite ( 1 reviews ) Topic: snake.
Python Mac Os Download
Source: CheckPoint
The infection vector contains two scripts. The first will copy the malware files to target locations “/Library/Scripts/” and create a LaunchDaemon in order to persist on the system.
Source: CheckPoint
The second script “installd.sh” will check if “installdp” process is running, and if not, will execute it.It is unknown what the infection vector is, if any infection was there at all. From the malicious binary file “installdp” it might be implied that this version of the malware is not finished as there are a lot of debug strings:
Source: CheckPoint
Links:
Samples: