Trend Micro tools tossed from Apple's Mac App Store after spewing fans' browser histories
Trend Micro anti-malware tools have vanished from Apple's Mac App Store – after they were spotted harvesting and siphoning off users' browser histories.
Dr Cleaner, Dr Antivirus, and App Uninstall – utilities owned by the Japan-headquartered security house and distributed on the Mac App Store – are no longer available for download. It is not entirely clear yet whether Apple took action itself and stripped the info-collecting software from its online macOS application store, or if Trend Micro pulled the apps itself following complaints. Its website today still links to the downloads even though they are no longer available.
While neither Apple nor Trend has responded to a request for comment on the matter, the removals are almost certainly a response to reports in recent days that the products appeared to covertly collect and upload private user data.
Mac security guru Patrick Wardle noted last week that in addition to the advertised functions of removing adware and malware from Macs, the software also collected people's personal data including their browsing history, then transmitted that data as a password-protected archive to a server on the internet.
"From a security and privacy point of view, one of the main benefits of installing applications from the official Mac App Store is that such applications are sandboxed," Wardle blogged.
"The other benefit is that Apple supposedly vets all submitted applications - but as we've clearly shown here, they (sometimes?) do a miserable job.)"
Fortunately, the newest version of Apple's OS appears to have addressed the first part of that. Wardle noted that those running preview versions of Mojave would have had the product running within new sandbox protections that would have blocked access to private data such as browsing history.
Still, as Wardle explained, the fact that both applications were signed off by Trend Micro and approved for the App Store by Apple should give users reason to be cautious when looking to get new software from even the Cupertino-sanctioned official portal and trusting Apple's own security protections which were in this case circumvented.
Source theregister
Latest Jobs
-
- Professional Services Security Engineer
- United Kingdom
- £65,000
-
Professional Services Security Engineer with current checkpoint experience is needed for the UK focused client facing implementation/migration, configuration position. The role will be utilising the latest versions of Checkpoint, so someone accredited with either CCSA or CCSE, on at least version R80 is ideal. The Professional Services Security Engineer must have current technical implementation experience using Checkpoint, however, I would look at someone with strong firewalling experience around other vendors such as Palo Alto and Fortinet. Being a multi-vendor professional services business, there is scope for this person to receive training and experience within other vendors. This is a UK wide role, the company in question has 2 offices across the UK, however, there is scope for this person to be home based when not on client site. Vendor training and exposure actively promoted.
-
- eDiscovery / Forensic Consultant, London, £65,000
- London
- £65,000
-
Senior eDiscovery / forensic consultant needed to join a business is recognised for helping top tier clients across eDiscovery, Forensics, Incident Response, Advisory etc. Known the for quality, consistency of work throughout the world. This individual MUST be London based, client facing with deep technical hands on experience with eDiscovery / forensic tools, techniques and best practice. Hands on experience using Relativity is essential. The position is split between engaging with client stakeholders to provide consultancy, technical engaging to identify, preserve, collect, process, review and produce electronically stored information in litigation and manage / provide support for the other internal business functions. This will include, but not be limited to; manging client engagements, collecting / processing data within Relativity, delivering / providing guidance customisation on reports, advising clients. Any of the following certifications are highly desirable. • Relativity Certified Administrator (RCA) • Relativity Processing Specialist • Relativity Analytics Specialist Travel to client site will be involved. Fluency in multiple European languages is highly desirable. All details kept in the strictest of confidence. Contact me on Chris.holt@dclsearch.com 07884666351 or 02086634030
-
- Public Sector Sales Consultant, Cyber, London, 140 OTE +, Uncapped earnings!
- London
- Up to £140,000 OTE
-
Public Sector Sales Consultant is needed in London as a new hire into a cybersecurity services, solutions and advisory business. Ideally, the Public Sector Sales Consultant should have experience selling cyber solutions, services and advisory but this is not essential. (Training can be provided) What is essential is the sales consultant must have a successful history overachieving against target selling into the Public Sector (Healthcare, Defence, Emergency Services, Government etc.).. This target for this opportunity will be £1.3m. The role will be split in delivering NEW BUSINESS into existing accounts (account management through existing partners, framework, direct etc) and new Logo NEW business. A full suite of solutions is available to the successful Public Sector Sales consultant. More importantly, there is an Uncapped earning for overachievement. A KEY requirement is an ability for the individual to achieve UK security clearance- UK passport holder is a must. There is a strong preference for will be given to those that already have clearance. Training, development, support and a warm inviting team. All details kept in the strictest of confidence. Ref: CH7497
-
- Partner Sales Director
- Germany
- Up to €165,000 Base + Double OTE
-
We are currently working on behalf of a global cybersecurity provider who are currently looking for a Partner Sales Director in Germany. The Partner Sales Director will be responsible for the go to market strategy for current Cyber Security OEM’s and new alliances across EMEA and CALA. Other responsibilities include; Sales strategy development and implementation, Partner development, Sales leadership etc. Experience Required Must have current experience in a sales leadership role specialising in Cyber Security (vendor experience with Cisco, Check Point etc.) Proven sales record of being able to lead, grow teams and exceed expectations. This individual MUST be based in Germany Ref: BD7496 (Partner Sales, Alliances Sales, Cyber Security Sales Jobs)