Thursday, March 28, 2024

DOS attack on Mac OS – Push fake alarms to Scare Users

One of the essential vectors for the delivery of technical support scams is malvertising. You’ll basically be browsing the web page then unexpectedly your program demonstrates a terrifying page guaranteeing your PC is infected.

Recently, there has been a pattern for scammers to cause denial-of-service attacks against user’s computers.

A lot of fake PC technical support campaigns finds their victims through cool calling. Be that as it may, these tricks are advancing to end up distinctly more like watering-opening methods, by demonstrating Malicious promotions for the assumed technical support.

Today security specialists at Malware bytes group found yet another procedure that targets Mac OS clients running Safari.

A recently registered scam site focusing on Mac clients was making the rounds toward the end of last year.

Basically going to the malicious site on an older version of MacOS would begin making a sequence of email drafts, which in the long run cause the machine to come up short on memory and stop.

DOS attack on Mac OS - Push fake alarms to Scare Users

The malicious website page will first decide the version of OS X with a client user agent check and push two distinct forms of DOS attack.

if ((navigator.userAgent.match(/OS 10.1.1/i))) {
 location.replace("");
}
else if ((navigator.userAgent.match(/OS 10.2/i))) {
 location.replace("");
}else
{
location.replace("");}

The first variation has code that will continue drafting messages (yet does not really send them) incrementally and cover the past open windows.

DOS attack on Mac OS - Push fake alarms to Scare Users

The second variant(11.php) will rather open iTunes:

DOS attack on Mac OS - Push fake alarms to Scare Users

Defences:

These defects may have been settled with MacOS Sierra 10.12.2 as Mac clients running a fully up-to-date OS don’t seem to be influenced by the Mail application DoS.

Be that as it may, the second variation seems to now be capable of opening up iTunes, without any alert in Safari:

Try not to fall for these sorts of scams, More essentially, please caution your family and companions about them.Update your OS, focusing on the security updates.

Website

Latest articles

2 Chrome Zero-Days Exploited at Pwn2Own 2024: Patch Now

Google has announced a crucial update to its Chrome browser, addressing several vulnerabilities, including...

The Moon Malware Hacked 6,000 ASUS Routers in 72hours to Use for Proxy

Black Lotus Labs discovered a multi-year campaign by TheMoon malware targeting vulnerable routers and...

Hackers Actively Exploiting Ray AI Framework Flaw to Hack Thousands of Servers

A critical vulnerability in Ray, an open-source AI framework that is widely utilized across...

Chinese Hackers Attacking Southeast Asian Nations With Malware Packages

Cybersecurity researchers at Unit 42 have uncovered a sophisticated cyberespionage campaign orchestrated by two...

CISA Warns of Hackers Exploiting Microsoft SharePoint Server Vulnerability

Cybersecurity and Infrastructure Security Agency (CISA) has warned about a critical vulnerability in Microsoft...

Microsoft Expands Edge Bounty Program to Include WebView2!

Microsoft announced that Microsoft Edge WebView2 eligibility and specific out-of-scope information are now included...

Beware of Free Android VPN Apps that Turn Your Device into Proxies

Cybersecurity experts have uncovered a cluster of Android VPN applications that covertly transform user...

Mitigating Vulnerability Types & 0-day Threats

Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

Related Articles