Mac systems turned into proxy exit nodes by AdLoad

This blog was jointly written by Fernando Martinez Sidera and Ofer Caspi, AT&T Alien Labs threat intelligence researchers.

Executive summary 

AdLoad malware is still infecting Mac systems years after its first appearance in 2017. AdLoad, a package bundler, has been observed delivering a wide range of payloads throughout its existence. During AT&T Alien Labs’ investigation of its most recent payload, it was discovered that the most common component dropped by AdLoad during the past year has been a proxy application …

adload alien amp blog bundler executive exit exit nodes intelligence labs mac malware nodes package proxy researchers systems threat threat intelligence written