Techsurvivors

Welcome to Techsurvivors => Tech => Topic started by: kimmer on February 12, 2018, 05:50:16 PM

Title: Malicious code at MacUpdate
Post by: kimmer on February 12, 2018, 05:50:16 PM
http://tidbits.com/article/17791

On Feb. 1, 2018, the MacUpdate site was hacked and a malicious code was inserted into a few updates (read article for further info). Note that the hack lies with MacUpdate, not the developers. Info on removing and such is at Malwarebytes.

https://blog.malwarebytes.com/threat-analys...macupdate-hack/

As TidBITS points out ... it’s always best to update an app from inside the app itself or via the developer’s Web site.
Title: Malicious code at MacUpdate
Post by: Xairbusdriver on February 12, 2018, 05:53:43 PM
Affirmative! Stop using all non-developer update sites.
Title: Malicious code at MacUpdate
Post by: jcarter on February 13, 2018, 07:42:50 AM
Got this from macupdate, obviously not, its in my trash.
Moused over the links.
Title: Malicious code at MacUpdate
Post by: jchuzi on February 13, 2018, 08:50:34 AM
QUOTE(Xairbusdriver @ Feb 12 2018, 06:53 PM) <{POST_SNAPBACK}>
Affirmative! Stop using all non-developer update sites.
Agreed, but I can't stop because I never started! That's like being advised to quit smoking for your own good. I guess I'll have to start smoking so that I can quit.  Devilish2.gif
Title: Malicious code at MacUpdate
Post by: Xairbusdriver on February 13, 2018, 09:31:38 AM
QUOTE
This is sitting in my trash
Why is it not sitting in your SpamSsieve "SPAM" box?! Or whatever app you use for training/monitoring/moving/deleting such 'messages'.

Perhaps Jane's email points out the similarities between the danger of smoke and using the web; you don't have to smoke to be harmed by others doing it. Likewise, merely using some sites means you may be targeted by SPAMmers. Get as many email addresses as possible and use them only for any new site that requires one. When, not if, you start getting SPAM to that address, close/cancel/change it.

Unfortunately, many of us used sites like c|net to download apps before the App Store existed and some devs could barely afford to buy a Mac, much less pay for a server! wink.gif Too soon, hackers saw these sites as easy access to a bigger 'market'... And some people still use these kinds of sites to download "free" or no longer supported versions of apps. "You can lead a horse to water but you can't teach him how to make lemonade!"
Title: Malicious code at MacUpdate
Post by: jcarter on February 13, 2018, 09:44:50 AM
This one was in my comcast spam box, but I looked at it and moved it to Trash, which I delete.

Its so important to mouse over those links!