Still, it looks normal enough, and continuing to run it brought up something that looked like OS X's normal Installer, except it wasn't. Notice where the file was downloaded from:. When encountering a new download, this is the first time you'll be presented with something that specifically identifies the file's source. That's because this attack is a full-fledged application masquerading as an installer by icon and name alone. This is normal for applications, but not normal for Installer packages. Trying to run this installer by double clicking brought up a dialog that OS X presents for any app you’ve downloaded from the Internet. Still, this looks like a normal installer.Īn Installer (Poorly) Masquerading as an Adobe Installer The attackers easily could have made it look better, even cloning Adobe's icons and styling. dmg revealed a very generic-looking "Installer" package. The file I then downloaded was a disk image named, “adobe_flashplayer_e2c7b_Setup.dmg.” Double clicking on the.
#Adobe reader for mac lion 10.7.4 how to#
It's up to you to ensure that the applications you install and run on your Mac come from the people you think they came from, and we'll show you how to do that.Ī Nefarious Installer Bypasses GatekeeperĪs originally discussed in Mac Geek Gab 542, while clicking through to an article from (the reputable and source-curated site), a seemingly innocuous (but fake) Flash update message appeared. The reality is that this leaves too much room for malware and adware, including the example I found below.įor the purposes of Gatekeeper, Apple verifies the identity of the developer, but not their intent. However, i f someone is willing to personally (or professionally) identify themselves to Apple, then Gatekeeper will allow their signed apps to run on OS X, regardless of what those apps will do to your system. Apple introduced Gatekeeper in OS X Lion as a way to ensure users don't unintentionally run apps or installers from unknown sources.
0 kommentar(er)
