For over a decade, I have been writing about malicious app search engine outcomes. Poisoned search outcomes it may well seem anyplace, together with on Google, Bing, or different fashionable engines like google.
The search outcomes comprise hyperlinks to pages that seem to have invaluable data. However not all of the hyperlinks on the checklist are essentially helpful.
In truth, the search outcomes could be worse than ineffective; they will also be insecure. They’ll result in malware, phishing websites, or different scams.
The Final Rip-off: Mimicking App Retailer Pages
This week, Kirk McElhearn (veteran Mac journalist, Intego author, and fellow Intego Mac podcast host) texted me an fascinating screenshot:
At first look, one may be tempted to suppose that it is a legit web page for an app out there on the App Retailer. However upon nearer inspection, some issues do not appear fairly proper, not less than to an clever consumer.
The massive inexperienced “obtain” button with a down arrow does not appear like one thing Apple would ever use. The place you’d anticipate to see an app icon, on this case there’s a top level view of the Apple emblem on a grey background. And the title of this “software” comprises the phrase Torrent; You’ll by no means discover torrents or BitTorrent consumer software program on the App Retailer.
Nevertheless it’s fairly seemingly that the typical Mac consumer will not instantly acknowledge these warning indicators. And that’s precisely what the web page bets on.
The implications of clicking
In the event you click on the obtain button on a web page like this, could be redirected to Mac malware (For instance, a Bundlore variant that masquerades as an Adobe Flash Participant installer, if you happen to can imagine it; Flash was discontinued in 2020.)
As an alternative, you might be redirected to a web page designed to trick you into creating an account, thereby capturing your actual electronic mail deal with and password. Since many individuals reuse the identical password throughout a number of websites, the web site operators might probably use this to hack into your electronic mail, Fb, or different accounts.
Watch out and use safety
In the event you discover a malicious web site just like the one described above, merely shut the browser tab or web page by urgent Command-W (⌘W). In the event you suppose you’ll have inadvertently downloaded malware onto your pc, obtain a free trial of Intego’s Mac or Home windows software program and begin a scan.
At any time when doable, obtain software program instantly by means of Apple’s App Retailer app, which comes pre-installed in your Mac, iPhone, or iPad. If a Mac app you want is not out there on the App Retailer, go on to the software program developer’s web site for data on how one can buy or obtain it.
Be sure you use anti-malware safety software program from a good developer, resembling Intego Mac Premium Bundle X9 or Intego Antivirus for Home windows.
How can I be taught extra?
To learn a few of my earlier analysis on search engine poisoning campaigns (since 2009!), you possibly can try:
each week within the Intego Mac Podcast, Intego’s Mac safety consultants focus on the newest Apple information, safety and privateness tales, and provide sensible ideas for getting essentially the most out of your Apple units. Be sure you observe the podcast to be sure you do not miss an episode.
You may as well subscribe to our digital e-newsletter and maintain an eye fixed right here on The Mac Safety Weblog for the newest safety and privateness information from Apple. And do not forget to observe Intego in your favourite social networks: 
About Joshua Lengthy
joshua lengthy (@joshmeister), chief safety analyst at Intego, is a famend safety researcher, author, and public speaker. Josh has a grasp’s diploma in IT with a focus in Web safety and has taken doctoral stage programs in data safety. Apple has publicly credited Josh for locating an Apple ID authentication vulnerability. Josh has been conducting cybersecurity analysis for over 20 years, which has usually been featured in main media retailers all over the world. Discover extra of Josh’s articles at safety.thejoshmeister.com and observe him on Twitter. See all posts by Joshua Lengthy →
– Fake App Store pages are the new fake Flash Player alerts
