![]() ![]() This extension, like all InstallCore extensions, does not use the aforementioned “Search-Assist” name. And sure enough, once the installer is finished, an InstallCore browser extension ends up installed in Safari: This is behavior exhibited by many adware installers these days, and this particular license agreement is identical to the ones being used by the InstallCore adware. Sure enough, when running this installer, it will display a license agreement that the user is likely to click right past, giving the installer the right to change the browser’s settings and install a “Search-Assist” browser extension: However, opening this disk image file results in a MacUpdate installer, very similar to the adware-riddled custom installers used by sites like and Softonic. The result was a file named Skype Installer.dmg, which seems legit on first glance. Urdaneta’s hints, I sought out the Skype page on the MacUpdate site and downloaded the app. In other words, it seems that MacUpdate, long considered to be one of the only remaining trustworthy download aggregation sites for the Mac, has succumbed to the same plague that has ruined most of the others: adware.įollowing Mr. A Twitter user named Ciro Urdaneta made a concerning discovery on Friday:
0 Comments
Leave a Reply. |