CompanyOperating Mac Adware
Our researchers discovered CompanyOperating as a rogue application during routine inspections of new file submissions to VirusTotal. Upon analysis, it was determined that this application functions as advertising-supported software (adware) and is affiliated with the AdLoad malware family.
Adware facilitates the display of third-party graphical content, such as pop-ups, banners, coupons, overlays, surveys, etc., on visited websites and/or different interfaces. It's important to note that this software may not present intrusive ad campaigns under certain conditions, such as browser/system incompatibility, non-visitation of specific sites, or other unsuitable conditions. However, the potential threat posed by adware persists even if it doesn't operate as intended.
Advertising-supported software is known for delivering advertisements that promote online scams, unreliable or dangerous software, and even malware. Clicking on some of these ads can trigger scripts that initiate stealthy downloads or installations. It's crucial to recognize that any seemingly genuine content encountered through these ads is likely endorsed by scammers who exploit affiliate programs to gain illegitimate commissions.
Although AdLoad apps may possess browser-hijacking capabilities, such functionalities were not observed during our testing of CompanyOperating. This rogue application is suspected to collect private information, as data tracking is a standard feature of adware. The targeted information may encompass visited URLs, viewed pages, search queries, Internet cookies, login credentials, personally identifiable details, credit card numbers, and more. The collected data can then be monetized through sale to third parties.
What is the AdLoad Family of Adware?
The AdLoad family refers to a group of adware and potentially unwanted programs (PUPs) that are known for delivering unwanted advertisements and, in some cases, exhibiting behavior that can be considered intrusive or malicious. AdLoad is often associated with deceptive advertising practices and has been known to display pop-up ads, banners and other kinds of advertising content on users' screens.
Adware from the AdLoad family may also engage in browser hijacking, where it takes control of the user's web browser, modifies settings, and redirects the user to specific websites. Additionally, some variants of AdLoad may have the ability to track users' online activities and collect data related to their browsing habits.
It's important to note that the specifics of adware families, including AdLoad, can change over time as new variants and versions are developed. Security researchers and antivirus companies regularly update their databases to detect and remove the latest threats. Users are advised to exercise caution when downloading and installing software from unfamiliar sources to avoid unintentionally installing adware or other potentially harmful programs. For the most current information, it's recommended to check with reliable cybersecurity sources or antivirus vendors.
