AppleInsider - Malicious Google ads deceive Mac users into installing Atomic Stealer
Google search can turn up malicious ads
A macOS malware discovered in April has found a new vector of attack, with people searching for software on Google finding malware presented as legitimate ads.
The malware payload known as Atomic macOS Stealer (AMOS) first appeared in April being sold on Telegram for $1,000 per month. Once installed, it collects the user’s system password via aggressive pop-ups and then siphons off sensitive data like passwords, crypto, and files.
According to a report from researchers at Malwarebytes, AMOS is being delivered via a Google ad scheme to unsuspecting searchers. The ads are legitimate and paid for but disguise themselves as the website or software the user is searching for.
This attack relies on users’ trust in Google when clicking on ad search results. It appears at the top of the page and has Google’s ad stamp of approval, so users click through without inspecting for suspicious URLs or domain owners.
Once the user clicks the link, they are presented with a normal-looking page. The attackers create a near-perfect clone of the website users expect, so they click through and download the software.
AMOS doesn’t need to go through the normal installation process through Gatekeeper since it is an ad-hoc signed app. Users are directed to right-click and open the software from the mounted .dmg file.
After the file is opened, a fake prompt for the system password keeps popping up until the user relents and enters their password. It then harvests what data it can from the user’s Keychain, file system, and crypto wallets and sends it to the malware operator.
A disguised malware delivery page. Source: Malwarebytes
How to protect yourself from AMOS
Google isn’t a foolproof tool. It delivers information based on the user’s account data and keywords, and malicious ads aren’t always going to get caught on review.
The number one security rule of the internet is paying attention to the URL. In the example given by Malwarebytes, the URL is trabingviews.com.
Users should exercise caution whenever they choose to download software from the web. The Mac App Store is the safest route for Mac users, but that won’t always be an option.
Pay attention to Google’s results, the URL you’re directed to, and the software installer itself. Be wary of how the software asks to be installed. Most software shouldn’t ask the user to bypass Gatekeeper.
A potential red-flag is software that demands the user open the app in place, on the installer image. As a general rule, it should ask the user to drag the installed app to the Finder.
Also, be wary of random requests for the system password, especially right after installing new software. Inspect the dialog for design irregularities or typos.
Pokémon isn’t the only game that’s been updated today, it seems Monolith Soft and Nintendo have also released a patch for the excellent Xenoblade Chronicles 3.
Compared to the previous update, Version 2.1.1 is quite small. It contains some bug fixes tied to the Expansion Pass and addresses a battle issue. You can get the full rundown courtesy of the official patch notes below:
Ver. 2.1.1 (Released September 12, 2023)
Bug Fixes
Fixed an issue where not having the Expansion Pass would cause the Special Hero BGM, Audio environment in Audio Setting, as well as Notifications to not display.
Fixed an issue with Staying Power’s Art Follow-Up, where activating Fusion Arts would cause the Follow-Up Attack damage to be dealt to the character using Fusion Arts and allies.
This latest update follows on from an update back in July, which added functionality for the Pyra and Mythra amiibo – allowing you to unlock some special weapons. You can learn more in our previous post here on Nintendo Life:
Have you downloaded this update yet? Notice anything else? Comment below.
[www.indiegala.com] Four Northern democracies are seemingly helpless against nearby predatory dictatorships. Despite their size, Finland, Norway, Denmark, and Sweden have a chance to avoid conquest through clever diplomacy or fierce resistance. Write a new history of the Nordic countries. https://www.youtube.com/watch?v=Ex2cgsCqqeo&ab_channel=HeartsOfIronIV
(Free Game Key) Spelldrifter - Free Epic Games Game
To grab the game for free: - Go to the store page of Spelldrifter - https://store.epicgames.com/p/spelldrifter - Click on the GET Button - Verify that the price is zero - Click on the Place Order Button - That's it, the game will be added to you Epic Games Account
We are welcoming everyone to join our discord[discord.gg]. We are more active there in finding giveaways, small or large, and there are daily raffles you can participate.
AppleInsider - Overnight updates to physical Apple Stores could hint at fast post-ev
AirPods Pro could get USB-C upgrade
Apple tends to hold its iPhone events on a Tuesday and release products about ten days later, but overnight updates to physical retail stores could mean quick product availability.
Of course, it could just be a simple marketing update. Apple tends to update marketing like posters and displays after an event anyway, so this wouldn’t be unusual.
News - Mortal Kombat 1 Welcomes In The New Era With Launch Trailer
Mortal Kombat 1 is out in a week’s time, but NetherRealm Studios has dropped the game’s launch trailer nice and early to get fans amped up for the newest entry in the bloodiest fighting game series around.
The launch trailer sets up some of the story for this “reboot”, where Fire God Liu Kang has created a brand new world. But we also get a look at Shang Tsung and Reiko — a general under his command — in combat.
While the latter only gets a brief section in the trailer, Shang Tsung’s fatality is on full display during the gameplay snippets, which is expectedly gory.
Reiko made his debut in Mortal Kombat 4 as a last-minute addition and caused some controversy among MK fans as some home console ports added a scene which shows Reiko in Shao Kahn’s throne room, where he adorns the skull mask. This has since been debunked by other games in the franchise. However, this is Reiko’s first playable appearance in some time, having been benched as a Kameo character for a while.
Even though Mortal Kombat 1 is only seven days away, some people have managed to get their hands on a Switch version of the game early and leaks are floating around on the internet, so be wary!
Mortal Kombat 1 launches on Switch on 19th September. Is the upcoming fighting game In Your Blood? Give us your thoughts in the comments.
[www.indiegala.com] Four Northern democracies are seemingly helpless against nearby predatory dictatorships. Despite their size, Finland, Norway, Denmark, and Sweden have a chance to avoid conquest through clever diplomacy or fierce resistance. Write a new history of the Nordic countries. https://www.youtube.com/watch?v=Ex2cgsCqqeo&ab_channel=HeartsOfIronIV
AppleInsider - Apple allegedly arguing iMessage isn’t big enough to be EU gatekeep
Apple’s iMessage
With just days to go before the European Union’s Digital Markets Act designates gatekeepers, Apple is allegedly arguing iMessage isn’t popular enough to be classified as a gatekeeper service.
The EU’s Digital Markets Act was first proposed in October 2020, but it didn’t get official approval until July 2022. The new law became applicable in April 2023, designates gatekeepers on September 6, then goes into effect in March 2024.
A report fromFinancial Times sourced from two anonymous individuals says Apple and Microsoft are arguing their “flagship services” are not popular enough to fall under the EU’s definition of gatekeeper services. Apple is specifically arguing iMessage should not be labeled a gatekeeper service.
The EU is expected to reveal which services fall under its gatekeeper banner in the first week of September. The DMA is meant to throttle perceived monopolistic powers of large tech firms, like Apple, Microsoft, and Google.
If Apple’s iMessage does fall under the DMA ruleset, it means Apple will be required to open iMessage to third-party operators. However, how Apple might do that remains to be seen.
To meet the requirements of a gatekeeper service, the EU says it must have at least 45 million monthly active users. The company must also exceed 7.5 billion euros annually or have a market cap that surpasses 75 billion euros.
Apple has confirmed that there are over 1 billion active iPhones in the world. However, the company does not go into detail regarding regions, so it’s unknown if iMessage reaches the 45 million monthly active users in the region.
Apple does meet the monetary requirements. There is some chance the iMessage user base is below the 45 million mark in the EU if only because other chat services dominate the region.
Apple allegedly arguing iMessage does not meet the requirements is a change from July. The company, along with Microsoft and others, confirmed the EU’s new gatekeeper law applied to them in a blanket statement, but didn’t carve out specific services like iMessage before.
Despite Apple’s apparent change of heart, the first list of gatekeeper services should be published in September. If iMessage does avoid the list, it does not mean it won’t be added in the future.
The App Store is likely to also be included in the EU’s gatekeeper services list. Apple has allegedly been working on App Store alternatives for iPhones since 2022.
