Spyware presenting itself as an anti-malware utility sending your browsing history to China

One of the major paid utilities of the Mac App Store that claims to protect your Apple computer from malware is actually disguised spyware that does exactly the opposite. The Adware Doctor application costs $ 5 on Apple's online store and security researchers have discovered that the malicious application collects your browsing history on Safari, Chrome and Firefox browsers and sends this data to a Chinese server.

Originally, the application stood as Adware Medic, sharing a name similar to the AdwareMedic application acquired by Malwarebytes, forcing Apple to remove the copier. However, after changing the name for Adware Doctor, Apple has authorized the application in the Mac App Store, and the application has collected a number of five-star reviews probably false. According to a report on 9to5 Mac, security researcher Patrick Wardle of Privacy 1st said he had informed Apple of his malicious behavior. Apple has removed the application after many technical publications have reported the behavior of the application on Friday, September 7.

In addition to sending your browsing history to China, Adware Doctor also has access to your iTunes search history as well as to other applications installed on the Mac. As an application designed to scan your Mac for malware and spyware, Adware Doctor has been able to overcome the sandbox protections on the Mac. Wardle discovered that the application required universal access on first run, which gave him access to information from other applications, such as Safari browsing history data. Apple says the release of MacOS Mojave this fall will bring new privacy protections designed to prevent applications like Adware Doctor from accessing Safari's browsing history.

However, Wardle noted that the application actually removes your browser from adware, and the application's data collection stopped a few days ago, reported PCMag. Mac 9to5 reported that the server in China is now offline, but it is still possible that it will resume operations.

The entry of Adware Doctor in the official Mac App Store of Apple should be of concern to consumers. Even though the application is highly rated – Adware Doctor has received more than 6,000 positive comments – users should always search for an app and the developer before installing anything on the Internet, no matter what. be it the origin. This incident follows a previous report, this week, of a fraudulent Chrome browser extension. A fake extension was uploaded to Google's Google Chrome website after hacking the original developer, allowing hackers to access its users' connections to other sites and services.

According to Thomas Reed, director of Malwarebytes for Mac and Mobile, the firm has already worked several times with Apple to remove fake applications, but these applications will reappear soon in a new version with a new name. "It is obvious that the Mac App Store is not the refuge of Apple's famous software," he said.