TECH

New Malware Might Make macOS Vulnerable Via Steganography

Malware is often targeted at Windows users. This is mainly because it accounts for the majority of the userbase around the world. But, that does not mean that users are immune to these malware attacks. A new malicious code which hides under plain sight, is particularly tagout macOS. And, it does seem to be pretty critical and easy to fall trap to.
The Transcript Virus
As VistaNews.ru reports, "The so-called payload VeryMal penetrates computers through ad image files saturated with steganography-based payload." For readers who are unaware of the term, steganography means integrating text or data in an image. This works both ways as well. That is, users can extract data from an image too. Steganography is a pretty common process and does not pose any harm as such. But, it can be exploited pretty easily. Mainly, that involves adding malicious code to the images.
The payload in question is a malicious javascript code, but it evades all filters and hides inside the image. What makes it more difficult to spot is its appearance. The image is a white strip but it comes along with a javascript. This module reads pixels (using canvas in HTML5) to recreate hidden malicious code and execute it. This malware targets Mac users specifically. So, it checks for the presence of Apple font families to verify the OS. The extraction process is aborted if there is no font present. If it detects families, the extraction process continues.
Once the code is executed, it shows the users that an update of Flash is downloading. This might seem like a pretty trick for most of us. But, users are not well acquainted with the same. I do not know what to do. Moving on, installing the software would start a malvertising bot in the background. The bot clicks on ads to generate revenue for the people behind all this.
Avoiding the malware is pretty easy. Users need to pay attention to what stuff they are downloading on the internet. Moreover, ad blockers will definitely make it difficult for the malware to target the user. So, a good ad blocker might help as well. Md Armughannudin