SecureMac.com
About SecureMac Advertise Security Consulting Mac Security Store Send Feedback

Site Information
Site Background
Who runs the site
Advertising
Security Consulting
Employment/Jobs
Feedback Form

SecureMac Software
PrivacyScan

 

Mac OS X Security
sudo buffer overflow exploit + fix
Disable Single User Boot Mode
Malevolence - Dumping Passwords
nidump security
Startup Security - Open Firmware Password Protection

Mac OS X Network Security
SAINT
Secure FTP Wrapper
Ettercap - sniffer interceptor logger
Snort - Network Intrusion Detection System
SSH Admin
SSH Helper
xnu - enable MAC Address spoofing


Mac OS X Virus

Mac OS X Firewalls
Firewalk Firewall Utility
NetBarrier X

Mac OS X App Sec.

Mac OS X Encryption
LittleSecrets
GPGMail - PGP Functionality

Mac OS X DoS

SecureMac Library
Mac Cable Modem Security
Mac Security Auditing
Mac OS X Security Understanding
Mac OS X Security Second Lessons
Mac OS X Security Third Lesson
Mac OS X Single User Mode Root Access
Mac OS X Shareware Firewalls
Mac OS X Secure Installation
Cable & DSL Connections - Security Measures
Better Safe than Sorry
Apple.com Security Resources
Marketing Macintosh Security Programs

CNET's Download.com Adware Installer Bundled with Popular Apps - Advisory

Update (10/29/13 12:15pm): SecureMac has prepared a guide to help users identify and remove the adware being distributed by CNET's download.com in place of popular Mac apps. The guide provides detailed information, including step-by-step instructions to determine if the adware is installed on your system, and the steps to remove it. View CNet Adware Identification and Removal Guide for Mac OS X.

 

Direct download links for a variety of popular Mac software products have been replaced on CNET's Download.com with installers for browser toolbars, commonly used by adware to track user browsing habits. A wide variety of Mac apps have had their download links replaced with the adware installer, including popular Mac antivirus software. It At this time it is not clear if CNET had provided any prior notification to the creators of affected apps, but it appears that many of the companies were unaware that their download links had been switched to one that installed toolbars and changed web browser settings.

When a user clicks the "Download Now" button, they receive the adware installer rather than the app they expected to download. The adware installer changes the user's homepage and default search engine to Yahoo, as well as installing various browser toolbars and add-ons, with names like "Slick Savings" and "Ebay Shopping Assistant." The browser extensions appear to come from a company called Spigot, Inc.


Apps affected by the adware downloader will be listed as "CNET Installer Enabled" on the website, which provides this further information:

"The CNET Download.com Installer is a tiny ad-supported stub installer or "download manager" that helps securely deliver your downloads from Download.com's servers. We also include offers for carefully screened software that complies with Download.com Software Policies as part of our Installer process."

While the the adware installer includes a way for the user to opt-out, the toolbar is set to be installed by default. Additionally, the installation is presented in such a way that it could confuse users who think they are installing the app they attempted to download. After the adware has been installed and browser settings changed, the installer retrieves the original software that the user intended to download, and presents it to the user.

This is a developing story, and we will update this page as more information becomes available.



Security + OS
DiskLock
PowerBook Security Control Panel
Empower Pro
FileGuard
FreeGuard
FoolProof
Deus Lock Master
OnGuard
Keys Off
LockOut
MacOS Algorithm
Modem Security
Password Key
PGPuam
PPF
Shift Key Suite
Stealth Signal
SuperLock Lite
SuperLock Pro
Web-Confidential


Macintosh Viruses
Disinfectant
Sophos Anti-Virus
Norton AntiVirus
Nav 7 Nav 6 Nav X
Virex - Oct
VirusBarrier - Netupdate
vScan - Discontinued.

Mac Physical Security


Macintosh Firewalls
DoorStop Firewall
Firewall Q & A
IPNetSentry
NetBarrier
Norton Personal Firewall

Mac Spyware & Privacy
Monitorer
NetShred - Delete Files Safely

Network Security
MacAnalysis
Oyabun Tools
WDTech RAE
ToolDaemon

Application Security Issues
AIM - AOL Instant Messenger
Back Orifice
Eudora E-Mail Client
Internet Configure
IE 5.1, OE 5.1, Powerpoint, Excel Vulnerability
MS Personal webServer
NetBus
Outlook Express 4.5 Password Flaw
SubSeven
Sub7ME Server

Resource Info
AppleShare Server Info

Mac OS Encryption
EnScript
FGP
FileTwister
ForgotIt?
GenPass
MacLockSmith
My-Privacy
My Secret
PGPi
PGPhone
PGP Personal
PGP Freeware
PowerCrypt-dev
Private File
Quick Encrypt
SubRosa Utilities
Tresor

Deleting Files
Eraser Pro
ShredIt

Backups

Apple Hardware

MacOS DoS
Mac Attack


All material (c) 2014 SecureMac.com and respected owners