InputDivision Mac Adware

During our evaluation of new file submissions, our researchers came across the InputDivision application. Upon closer examination, we determined that InputDivision is adware belonging to the AdLoad malware family.

Adware, short for advertising-supported software, is created to inundate users with unwanted or deceptive advertisements. These third-party graphical elements, such as pop-ups, banners, overlays, coupons, and surveys, are displayed on visited websites or other interfaces.

These advertisements promote online scams, unreliable or harmful software, and even malware. Some intrusive ads can execute scripts upon being clicked, leading to downloads or installations without the user's consent.

It is important to note that while legitimate products and services may be advertised, they are unlikely to be endorsed by their original developers or official parties. More often, these promotions are conducted by scammers who exploit affiliate programs to gain illegitimate commissions.

Certain conditions may need to be met for advertising-supported software to launch intrusive advertising campaigns, such as specific browser or system specifications or visiting particular websites. Regardless of whether InputDivision displays advertisements, its presence on a system remains a threat.

Additionally, AdLoad applications typically have browser-hijacking capabilities. However, our analysis of this particular rogue application did not reveal any such functionality.

Furthermore, it is likely that InputDivision collects private information. Adware tends to target browsing and search engine histories, internet cookies, usernames, passwords, personally identifiable information, credit card numbers, and more. The gathered data can be shared with or sold to third parties, potentially including cybercriminals.

How is Adware Like InputDivision Distributed Online?

Adware like InputDivision is distributed online through various methods. Here are some common ways adware is disseminated:

• Bundled software: Adware often comes bundled with free or pirated software that users download from untrustworthy sources. When users install the desired software, the adware is silently included in the installation package and installed alongside it without their knowledge or explicit consent.
• Deceptive download portals: Adware can be distributed through deceptive download portals or websites that offer seemingly legitimate software downloads. Users may inadvertently download and install adware along with the intended software if they are not cautious about the sources they use.
• Fake software updates: Cybercriminals may create fake pop-up alerts or notifications that mimic legitimate software update prompts. These misleading messages trick users into clicking on them and unknowingly downloading and installing adware instead of the promised updates.
• Malicious advertisements: Adware can be distributed through malicious online advertisements, commonly known as malvertisements. These advertisements appear on legitimate websites and, when clicked, redirect users to sites that host adware installers.
• File-sharing networks: Adware may be shared through peer-to-peer (P2P) file-sharing networks, where users unknowingly download infected files containing adware alongside the desired content they are seeking to download.
• Unverified browser extensions or add-ons: Adware can be distributed through unverified or malicious browser extensions or add-ons. Users who install these extensions may unknowingly introduce adware into their browsers, leading to unwanted advertisements and intrusive behavior.