MAC security researchers expose two new exploits

Two new MAC operations recently discovered are good memories of best practices to stay safe, such as not let foreigners access your computer, keep up to date with software updates and get your software from sources known confidence.

The first exploitation involves parallel, the virtual machine that allows Mac to run Windows, Linux and older macos versions. The vulnerability is on Intel Mac running parallels and allows an attacker to obtain root access by exploiting holes in the routine of creating parallels. However, the attacker must have access to Mac to do this.

Researcher Mickey Jin decided post About the vulnerability that was related to Parallels seven months ago, in an attempt to determine the company to issue a solution. Parallels posted a Knowledgebase article About the defect, stating that Parallels Desktop 20.2.2 and Parallels Desktop 19.4.2, which will include corrections, will be issued this week. Apple silicon macs are not affected.

The other new exploitation, reported Through the proofpoint security company, it involves a new malware called frigidstealer. The attack appears when a user receives an Email that contains an URL, and when the user opens it, a web page is launched with an alert to say that the browser must be updated. When clicking on the update button, an installer is saved on Mac, and the user is trained to open it by clicking control on the application icon and selecting Open from the pop-up menu. Opening the file in this way bypass Gatekeeper, the built -in security of Macos that checks the malicious applications. It then installs the malware.

Malware frigidstealer attacks targeted users from outside North America. If installed, it records information and files related to passwords, browser cookies and anything created in Apple notes.

How to protect yourself

The easiest way to protect yourself from malware is to avoid downloading software from warehouses such as github and other download sites. Apple has checked software in Mac App Store and is the safest way to get applications. If you prefer not to patronize Mac App Store, then buy software directly from the developer and their site. If you insist on using the cracked software, you will always risk exposure to malware.

Never open links in E -emails or texts that you receive from unknown and unexpected sources. If you receive a message that seems to be from an entity you do business, check the sender’s E -Email and carefully inspect. If you see a link or button, you can click this, select Copy Link, then glue it to a text editor to see the real URL and check.

Apple launches security patches through updates of the operating system, so installing them as soon as possible is important. It is also important to update the applications on your Mac, which you can do through the App Store or through the application settings. Macworld has several help guides including a guide on Whether or not you need antivirus softwareA List of Mac, Malware and Trojan virusesAnd a MAC security software comparison.