Application Support/-Sweeper/ history.zip According to objective-see, By editing the system’s /etc/hosts file we can redirect this request to a server we control can capture what Adware Doctor is trying to upload. Adware Doctor.44148 open ~/Library/Containers/-Sweeper/Data/Library Researchers performed an in-depth analysis using process monitor and retrieve the zip utility file to create a password-protected archive history.zip that was being uploaded to the Chinese server. PoC: #malware #virus #MacOS #Apple #MacBook #MacBookPro #CyberSecurity #privacy #GDPR #Hacking #hackers #cyberpunk #AlertĪbove Tweet that posted along with POC demonstrate that Adware Doctor collecting and stealthily exfiltrating a variety of sensitive user data including browser history.

Top Sold MacOS AppStore application is ROGUE. Many of the users reported to Apple regarding this unusual behavior but Apple doesn’t care much and one of the recent tweet state that, Top Sold MacOS AppStore application is ROGUE. Adware Doctor Stealing Sensitive User Data Operation Apart from that, This app initially posed as Adware medic and its owned by Malwarebytes which leads to pullout but it came back to the store when it changes its name as Adware Doctor.

App store adware cleaner mac