ClickAgent
also known as OSX/ClickAgent.FLA
- Type:
- Adware
- Platform:
- Mac OS X
- Last updated:
- 02/09/16 9:14 pm
- Threat Level:
- High
Description
ClickAgent is adware. It masquerades as a Flash Player installer and may be found on various websites, especially filesharing and adult websites.
When ClickAgent was discovered in August 2013, it had been signed with an actual Apple Developer ID. If a user installs it, it will be added as an extension to their web browser — Safari, Chrome, or Firefox — and begin injecting ads into any website that the user visits. Some of these ads may be inappropriate or pornographic in nature. The extension itself has varying permissions depending on the browser to which it has been added: The Firefox version is allowed to automatically update itself; the Chrome version can access and modify the browser’s history, access tabs and web activity, and manage other apps and extensions. The ClickAgent extension also includes a link to the actual Adobe website in an attempt to convince the user of its legitimacy.
Analysis of network traffic on a ClickAgent-infected machine revealed that the injected ads belonged to several different advertising networks, meaning that ad revenue was the likely goal of the malware’s authors.
ClickAgent Threat Removal
MacScan can detect and remove ClickAgent Adware from your system, as well as provide protection against other security and privacy threats. A 30-day trial is available to scan your system for this threat.
