[Thread] Security researcher finds Zoom uses a "shady" technique to install its Mac app without user interaction, applying tricks used by macOS malware (Felix/@c1truz_)

Felix / @c1truz_:
[Thread] Security researcher finds Zoom uses a “shady” technique to install its Mac app without user interaction, applying tricks used by macOS malware  —  Ever wondered how the @zoom_us macOS installer does it's job without you ever clicking install? Turns out they (ab)use preinstallation scripts, manually unpack the app using a bundled 7zip and install it to /Applications if the current user is in the admin group (no root needed). https://twitter.com/...



from Techmeme https://ift.tt/2QVz1qL

Comments

Popular posts from this blog

Microsoft says it has no plans to add more backward compatible titles for Xbox One, but says Project Scarlett will run games from all four Xbox generations (Tom Warren/The Verge)

Tencent-backed Chinese online education startup Huohua Siwei, which offers K-12 math and science courses, closes its $400M Series E at a $1.5B valuation (Emma Lee/TechNode)

SetSail raises $26M Series A for its service that recommends when to pay salespeople, by monitoring the progress of sales across CRM, email, and other systems (Ron Miller/TechCrunch)