Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
Tags
attack-pattern: Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Connection Proxy - T1090 Man In The Middle
Show in Graph
Common Information
Type Value
UUID a702b140-c469-461e-9e1a-9b6387be0bb5
Fingerprint b4e32d152932b497
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 5, 2018, midnight
Added to db Jan. 18, 2023, 11:41 p.m.
Last updated Oct. 14, 2024, 3 p.m.
Headline Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
Title Inside SearchPageInstaller | macOS Malware Deploys a MITM Attack
Detected Hints/Tags/Attributes 31/1/4
Source URLs
Redirection Url
Details Source https://www.sentinelone.com/blog/inside-searchpageinstaller-macos-malware-deploys-mitm-attack/
URL Provider
Details Provider Source level domain
Details sentinelone.com www.sentinelone.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
mac360.com
Details Domain 1 
chaumonttechnology.com
Details Domain 4 
inject.py
Details File 4 
inject.py