Skip to main content

[Thread] Security researcher finds Zoom uses a "shady" technique to install its Mac app without user interaction, applying tricks used by macOS malware (Felix/@c1truz_)

Felix / @c1truz_:
[Thread] Security researcher finds Zoom uses a “shady” technique to install its Mac app without user interaction, applying tricks used by macOS malware  —  Ever wondered how the @zoom_us macOS installer does it's job without you ever clicking install? Turns out they (ab)use preinstallation scripts, manually unpack the app using a bundled 7zip and install it to /Applications if the current user is in the admin group (no root needed). https://twitter.com/...



from Techmeme https://ift.tt/2QVz1qL
via IFTTT
Labels:

Comments

Post a Comment

Popular posts from this blog

An interview with El Salvador's top crypto regulator Juan Carlos Reyes on taking a tech-minded approach to crypto regulation, how his agency works, and more (Tom Carreras/CoinDesk)

Tom Carreras / CoinDesk : An interview with El Salvador's top crypto regulator Juan Carlos Reyes on taking a tech-minded approach to crypto regulation, how his agency works, and more   —  The National Commission of Digital Assets is the agency in charge of regulating crypto in El Salvador, the first nation to accept Bitcoin as legal tender. from Techmeme https://ift.tt/j9ifNz1 via IFTTT
Post a Comment
Read more

A viral YouTube video from MegaLag claims PayPal's Honey browser extension often doesn't show users the best coupon codes and steals creators' affiliate revenue (Ryan Christoffel/9to5Mac)

Ryan Christoffel / 9to5Mac : A viral YouTube video from MegaLag claims PayPal's Honey browser extension often doesn't show users the best coupon codes and steals creators' affiliate revenue   —  Honey is a popular browser extension owned by PayPal that's at the center of a big new controversy. from Techmeme https://ift.tt/9AJ0egS via IFTTT
Post a Comment
Read more

DeepSeek, which started as a deep-learning research branch of Chinese quant hedge fund High-Flyer, is now giving US AI giants a run for their money (Zeyi Yang/Wired)

Zeyi Yang / Wired : DeepSeek, which started as a deep-learning research branch of Chinese quant hedge fund High-Flyer, is now giving US AI giants a run for their money   —  When Chinese quant hedge fund founder Liang Wenfeng went into AI research, he took 10,000 Nvidia chips and assembled a team of young, ambitious talent. from Techmeme https://ift.tt/jQxOTDV via IFTTT
Post a Comment
Read more