Add to favourites
News Local and Global in your language
16th of October 2018

Internet



Popular Mac Adware Blocker Found Sending All Browser History to China - ExtremeTech

This site may earn affiliate commissions from the links on this page. Terms of use.

The Mac-based Adware Doctor is one of the most popular apps in the Mac App Store and the 4th highest-grossing application. Apple positions the Mac Store as the safest place to download Mac software and literally states in its ad copy that “The safest place to download apps for your Mac is the Mac App Store.” A new investigation of the application, however, proved that Adware Doctor did far more than block advertising.

According to Patrick Wardle of Objective-See, who undertook an investigation of the application, Adware Doctor is a capital piece of spyware — and it took Apple more than a month to remove the app from the Mac Store even once Wardle had turned over his findings. He notes that he worked closely with @privacyis1st to compile the report.

applePage

Image by Objective-See

While Adware Doctor does indeed contain a malware detection database, when you actually tell it to clean your system, it gets busy… exfiltrating all of your data. It then creates a file to hold this information (history.zip) and contacts its own servers to upload it. It exports your entire browser history, along with data from the App Store and other information. This, it must be noted, should be impossible. Apps downloaded from the App Store are supposed to be immune to this kind of exfiltration. But AD requests permission to access the Home directory (for the purposes of performing a malware scan), which means it’s also been granted permission to perform a whole host of other activities, including gathering your browser history.

AdwareExfil

Image by Objective-See

There are also some previously unacknowledged holes in Apple’s sandboxing capabilities, given that the malware is able to extract a list of all running processes (Wardle steps through how it accomplishes this). But the larger issue here is that all of this is taking place under Apple’s very nose, in an application that has supposedly been through a rigorous review process, with multiple capabilities that fly directly in the face of Apple’s published rules.

Apps that collect and store data must receive permission to do so. Apps must not trick or force people to reveal information unnecessarily. Developers that use these or similar surreptitious behaviors will have their apps removed from the App Store. Apple did finally remove Adware Doctor from the App Store once this story started to break, but as Wardle notes, he reported his findings to Apple a month ago and was promised a swift response. That response only happened once Apple realized the issue had gone public. In the meantime, every single person who bought or used Adware Doctor in the 30 days since Wardle made the initial report has had their data exfiltrated to China.

The App Store is the safest place to download apps for your Mac. Except, of course, when Apple knowingly distributes for malware for at least a month.

Now Read: Apple Announces Keyboard Repair Program, Apple is in Danger of Abandoning Creative Pros, and Apple Rolls Out Flawed Password-Cracking Defense

Read More




Leave A Comment

More News

Latest ITProPortal news

ExtremeTech » Internet

TechRadar: Internet news

TechCrunch » Enterprise

How-To Geek

Digital Trends

Disclaimer and Notice:WorldProNews.com is not the owner of these news or any information published on this site.