Buzz
Once installed, the Coin Ticker app allows users to choose cryptocurrencies like BitCoin or Ethereum to monitor. It then displays a small widget on the macOS menu bar, updating the changing prices of cryptocurrencies.
Alert: Fake Trojan disguising as a Bitcoin application installing a backdoor
Notably, this application will silently download 2 backdoors on the user's Mac, allowing attackers to remotely control the victim's device.
This issue was first discovered by a member with the username 1vladimir on the Malwarebyte forum. When executed, the Trojan connects to a remote server and downloads python and shell scripts for installing 2 backdoors on the victim's computer.
In a blog post, Thomas Reed, Director of Mac & Mobile at Malwarebytes, explained: 'Upon execution, the application will download and install components of 2 different open-source backdoors, namely EvilOSX and EggShell'.
The Trojan will download customized versions of the EggShell and EvilOSX backdoors from an offline Github repository. Specifically, the Trojan first downloads the EggShell backdoor using the following command:
Upon completion, it will create a background program to automatically initiate the EggShell backdoor when the user logs into Mac.
Next, the Trojan will download the EvilOSX payload using an Obfuscated Script. During the download process, it will send various configuration options, automatically added after the backdoor download.
Additionally, the Trojan will launch the background program it created to enable the automatic startup of the EvilOSX backdoor.
It remains unclear whether the Coin Ticker app is designed for malicious purposes, as unauthorized access by attackers to the app is possible. The app's download website features only one Download button, likely serving as a facade for Trojan distribution.
After relentless efforts from the development team, they have finally reaped well-deserved rewards as Opera clinches the prestigious Red Dot Design Award 2018 for the Opera Touch browser. It stands out with its high-quality, visually pleasing, innovative design, and user-friendly interface.
