{"id":81813,"date":"2023-11-25T01:01:46","date_gmt":"2023-11-25T01:01:46","guid":{"rendered":"https:\/\/posterboyedit.com\/?p=81813"},"modified":"2023-11-25T01:01:46","modified_gmt":"2023-11-25T01:01:46","slug":"warning-to-mac-users-over-fake-browser-updates-that-steal-passwords","status":"publish","type":"post","link":"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/","title":{"rendered":"Warning to Mac users over fake browser updates that steal passwords"},"content":{"rendered":"<h1>Urgent warning to Mac users over fake browser updates that can steal your passwords &#8211; here&#8217;s how to spot them<\/h1>\n<ul>\n<li><strong>Mac users are being targeted by hackers using fake browser updates\u00a0<\/strong><\/li>\n<li><strong>Once users download the update a virus immediately steals their passwords\u00a0\u00a0<\/strong><\/li>\n<\/ul>\n<p><span><\/span><span>Mac users should be on the lookout for fake browser updates that can steal your passwords, cybersecurity experts have warned.\u00a0<\/span><span><\/span><\/p>\n<p><span><\/span><span>A new malware campaign targeting Apple products tricks users into downloading a &#8216;browser update&#8217; which actually contains a &#8216;one hit smash-and-grab&#8217; virus.\u00a0<\/span><span><\/span><\/p>\n<p><span><\/span><span>Cybercriminals are even creating malicious ads on\u00a0<\/span><span><\/span><span><span>Google<\/span><\/span><span><\/span><span> which impersonate familiar and legitimate tech brands to lure in potential targets.\u00a0<\/span><span><\/span><\/p>\n<p><span><\/span><span>Once you have entered the website, fake pop-ups will prompt you to download a browser update to view the site.<\/span><span><\/span><\/p>\n<p>Worryingly, the fake prompts are extremely convincing, and even a savvy user could be tricked if they don&#8217;t know what to look for.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/i.dailymail.co.uk\/1s\/2023\/11\/23\/12\/78156235-12783767-image-a-11_1700741832061.jpg\" height=\"385\" width=\"634\"><\/p>\n<p>Could you spot that this is fake? Cybercriminals are using fake pop-ups to trick users into downloading password-stealing malware<\/p>\n<h3>FACT BOX TITLE:\u00a0I used to be a cyber criminal making $500,000 a year: Here&#8217;s what you need to know to protect yourself from hackers online<\/h3>\n<p>The malware, which has been dubbed ClearFake by cybersecurity researchers, is a new version of the widely used Atomic Stealer attack.<\/p>\n<p>However, this earlier version only targeted Windows machines, whereas this new attack targets Mac OS and is more sophisticated in its techniques.<\/p>\n<p>Previously, hackers would hide the virus in fake versions of popular software like Microsoft Office which they would claim had been &#8216;cracked&#8217; for free download.\u00a0<\/p>\n<p>Now, hackers are buying ads on Google, most likely through hijacked websites, to lure users to fake websites.\u00a0<\/p>\n<p>Users are then prompted to update their browser to view the page and are instructed on how to open the file.<\/p>\n<p>As soon as the target runs the program, the virus steals the user&#8217;s data and sends it to a remote &#8216;command and control server&#8217; to be collected and monetized by the criminals.\u00a0<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/i.dailymail.co.uk\/1s\/2023\/11\/23\/13\/78156971-12783767-Once_users_enter_the_fake_website_they_are_prompted_to_install_a-a-34_1700744773544.jpg\" height=\"472\" width=\"634\"><\/p>\n<p>Once users enter the fake website they are prompted to install a browser update which secretly contains the malware\u00a0<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/i.dailymail.co.uk\/1s\/2023\/11\/23\/13\/78156241-12783767-Users_are_given_instructions_on_how_to_download_the_malicious_fi-a-35_1700744773544.jpg\" height=\"215\" width=\"634\"><\/p>\n<p>Users are given instructions on how to download the malicious file which immediately begins to steal information from their computer\u00a0<\/p>\n<h3>What is Atomic Stealer and how do you stay safe from it?\u00a0<\/h3>\n<p>Atomic Stealer, also called AMOS, is a very popular malware that extracts user data from infected devices.<\/p>\n<p>The malware is actively sold over Telegram where hackers can rent the tool for a month at a time.<\/p>\n<p>Atomic Stealer works on Windows devices and is often accidentally downloaded along with fake files.<\/p>\n<p>To stay safe, use an anti-virus program or web protection service.<\/p>\n<p>Also, be very careful when downloading files online and only use trusted sites.\u00a0<\/p>\n<p>J\u00e9r\u00f4me Segura, a researcher at Malwarebytes, who has been tracking the malware, says that this is &#8216;one of the most prevalent and dangerous social engineering schemes.&#8217;<\/p>\n<p>Hidden inside the virus&#8217; code, the researchers found commands to extract users&#8217; passwords, auto-fills, user information, wallets, browser cookies, and keychain data.<\/p>\n<p>Mr Segura said: &#8216;This may very well be the first time we see one of the main social engineering campaigns, previously reserved for Windows, branch out not only in terms of geolocation but also operating system.&#8217;<\/p>\n<p>Researchers reported that a Telegram channel operated by the virus&#8217; creators has emerged.<\/p>\n<p>For $1,000 (\u00a3797) a month, criminals can rent the malware on a subscription basis and deploy it how they want.<\/p>\n<p>Malwarebytes found that one &#8216;threat actor&#8217; was distributing malware bought on the channel through hundreds of compromised websites.\u00a0<\/p>\n<p>Security vendor SentinelOne, which has also been tracking the attack since its discovery, says the channel had over 300 members in May.<\/p>\n<p>Interestingly, SentinelOne researchers note that the virus does not linger on a target&#8217;s computer but instead uses a &#8216;one-hit smash and grab methodology&#8217;.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/i.dailymail.co.uk\/1s\/2023\/11\/23\/13\/78156969-12783767-The_fake_updates_have_been_specifically_tailored_for_Mac_and_tar-a-36_1700744773545.jpg\" height=\"249\" width=\"634\"><\/p>\n<p>The fake updates have been specifically tailored for Mac and target Safari and Chrome, the two most popular Mac web browsers\u00a0<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/i.dailymail.co.uk\/1s\/2023\/11\/23\/13\/78156239-12783767-Hidden_within_the_code_researchers_discovered_commands_to_steal_-a-37_1700744773546.jpg\" height=\"189\" width=\"634\"><\/p>\n<p>Hidden within the code researchers discovered commands to steal users&#8217; passwords, wallets, browser cookies and more\u00a0<\/p>\n<p>Fake browser updates on Windows systems are not uncommon and have existed for years, but this kind of attack has not yet been used to target Mac systems.\u00a0<\/p>\n<p>This warning comes amid a broader increase in the danger for Macs online as reports find a 1,000 per cent increase in the number of threat actors targeting Apple products since 2019.<\/p>\n<p>To stay safe online, Malwarebytes recommends that Mac users download a web protection tool which can block the malicious infrastructure used for the attack.<\/p>\n<p>Additionally, users should be careful when following links to non-trusted sites and check carefully before downloading any content.\u00a0<\/p>\n<p>MailOnline has contacted Apple and Google for comment.\u00a0\u00a0<\/p>\n<h3>HOW TO CHECK IF YOUR EMAIL ADDRESS IS COMPROMISED<\/h3>\n<p><span>Have I Been Pwned?<\/span><\/p>\n<p>Cybersecurity expert and Microsoft regional director Tory Hunt runs &#8216;Have I Been Pwned&#8217;.<\/p>\n<p>The website lets you check whether your email has been compromised as part of any of the data breaches that have happened.\u00a0<\/p>\n<p>If your email address pops up you should change your password.<\/p>\n<p><span>Pwned Passwords<\/span><\/p>\n<p>To check if your password may have been exposed in a previous data breach, go to the site&#8217;s homepage and enter your email address.<\/p>\n<p>The search tool will check it against the details of historical data breaches that made this information publicly visible.\u00a0<\/p>\n<p>If your password does pop up, you&#8217;re likely at a greater risk of being exposed to hack attacks, fraud and other cybercrimes.<\/p>\n<p>Mr Hunt built the site to help people check whether or not the password they&#8217;d like to use was on a list of known breached passwords.\u00a0<\/p>\n<p>The site does not store your password next to any personally identifiable data and every password is encrypted<\/p>\n<p><span>Other Safety Tips<\/span><\/p>\n<p>Hunt provides three easy-to-follow steps for better online security. First, he recommends using a password manager, such as 1Password, to create and save unique passwords for each service you use.\u00a0<\/p>\n<p>Next, enable two-factor authentication. Lastly, keep abreast of any breaches<\/p>\n<p>Source: <a href=\"https:\/\/www.dailymail.co.uk\/sciencetech\/article-12783767\/Urgent-warning-Mac-users-fake-browser-updates-steal-passwords-heres-spot-them.html\" target=\"_blank\" rel=\"noopener\">Read Full Article<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Urgent warning to Mac users over fake browser updates that can steal your passwords &#8211; here&#8217;s how to spot them Mac users are being targeted by hackers using fake browser updates\u00a0 Once users download the update a virus immediately steals their passwords\u00a0\u00a0 Mac users should be on the lookout for fake browser updates that can&hellip;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Warning to Mac users over fake browser updates that steal passwords - posterboyedit<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Warning to Mac users over fake browser updates that steal passwords - posterboyedit\" \/>\n<meta property=\"og:description\" content=\"Urgent warning to Mac users over fake browser updates that can steal your passwords &#8211; here&#8217;s how to spot them Mac users are being targeted by hackers using fake browser updates\u00a0 Once users download the update a virus immediately steals their passwords\u00a0\u00a0 Mac users should be on the lookout for fake browser updates that can&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/\" \/>\n<meta property=\"og:site_name\" content=\"posterboyedit\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-25T01:01:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i.dailymail.co.uk\/1s\/2023\/11\/23\/12\/78156235-12783767-image-a-11_1700741832061.jpg\" \/>\n<meta name=\"author\" content=\"mediabest\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"mediabest\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/\",\"url\":\"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/\",\"name\":\"Warning to Mac users over fake browser updates that steal passwords - posterboyedit\",\"isPartOf\":{\"@id\":\"https:\/\/posterboyedit.com\/#website\"},\"datePublished\":\"2023-11-25T01:01:46+00:00\",\"dateModified\":\"2023-11-25T01:01:46+00:00\",\"author\":{\"@id\":\"https:\/\/posterboyedit.com\/#\/schema\/person\/abc9aeefdadf991087d66599cfc40c8d\"},\"breadcrumb\":{\"@id\":\"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/posterboyedit.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Lifestyle\",\"item\":\"https:\/\/posterboyedit.com\/category\/lifestyle\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Warning to Mac users over fake browser updates that steal passwords\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/posterboyedit.com\/#website\",\"url\":\"https:\/\/posterboyedit.com\/\",\"name\":\"posterboyedit\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/posterboyedit.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/posterboyedit.com\/#\/schema\/person\/abc9aeefdadf991087d66599cfc40c8d\",\"name\":\"mediabest\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/posterboyedit.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e73c98805c733847e7bd8261624c7373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e73c98805c733847e7bd8261624c7373?s=96&d=mm&r=g\",\"caption\":\"mediabest\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Warning to Mac users over fake browser updates that steal passwords - posterboyedit","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/","og_locale":"en_US","og_type":"article","og_title":"Warning to Mac users over fake browser updates that steal passwords - posterboyedit","og_description":"Urgent warning to Mac users over fake browser updates that can steal your passwords &#8211; here&#8217;s how to spot them Mac users are being targeted by hackers using fake browser updates\u00a0 Once users download the update a virus immediately steals their passwords\u00a0\u00a0 Mac users should be on the lookout for fake browser updates that can&hellip;","og_url":"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/","og_site_name":"posterboyedit","article_published_time":"2023-11-25T01:01:46+00:00","og_image":[{"url":"https:\/\/i.dailymail.co.uk\/1s\/2023\/11\/23\/12\/78156235-12783767-image-a-11_1700741832061.jpg"}],"author":"mediabest","twitter_card":"summary_large_image","twitter_misc":{"Written by":"mediabest","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/","url":"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/","name":"Warning to Mac users over fake browser updates that steal passwords - posterboyedit","isPartOf":{"@id":"https:\/\/posterboyedit.com\/#website"},"datePublished":"2023-11-25T01:01:46+00:00","dateModified":"2023-11-25T01:01:46+00:00","author":{"@id":"https:\/\/posterboyedit.com\/#\/schema\/person\/abc9aeefdadf991087d66599cfc40c8d"},"breadcrumb":{"@id":"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/posterboyedit.com\/lifestyle\/warning-to-mac-users-over-fake-browser-updates-that-steal-passwords\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/posterboyedit.com\/"},{"@type":"ListItem","position":2,"name":"Lifestyle","item":"https:\/\/posterboyedit.com\/category\/lifestyle\/"},{"@type":"ListItem","position":3,"name":"Warning to Mac users over fake browser updates that steal passwords"}]},{"@type":"WebSite","@id":"https:\/\/posterboyedit.com\/#website","url":"https:\/\/posterboyedit.com\/","name":"posterboyedit","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/posterboyedit.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/posterboyedit.com\/#\/schema\/person\/abc9aeefdadf991087d66599cfc40c8d","name":"mediabest","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/posterboyedit.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e73c98805c733847e7bd8261624c7373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e73c98805c733847e7bd8261624c7373?s=96&d=mm&r=g","caption":"mediabest"}}]}},"_links":{"self":[{"href":"https:\/\/posterboyedit.com\/wp-json\/wp\/v2\/posts\/81813"}],"collection":[{"href":"https:\/\/posterboyedit.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/posterboyedit.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/posterboyedit.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/posterboyedit.com\/wp-json\/wp\/v2\/comments?post=81813"}],"version-history":[{"count":1,"href":"https:\/\/posterboyedit.com\/wp-json\/wp\/v2\/posts\/81813\/revisions"}],"predecessor-version":[{"id":81814,"href":"https:\/\/posterboyedit.com\/wp-json\/wp\/v2\/posts\/81813\/revisions\/81814"}],"wp:attachment":[{"href":"https:\/\/posterboyedit.com\/wp-json\/wp\/v2\/media?parent=81813"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/posterboyedit.com\/wp-json\/wp\/v2\/categories?post=81813"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/posterboyedit.com\/wp-json\/wp\/v2\/tags?post=81813"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}