Common malware slipped past the macOS notarization process twice
Apple immediately revoked the notarization, but the adware slipped through again

Apple launched a notarization process for all apps and software created for macOS in February to weed out malware. Recently, a college student discovered adware with a full macOS notarization, according to WIRED.
Mac computers were once impenetrable vaults, which led to few hackers attempting to infiltrate them. Those who tried would generally hit roadblocks. Today, Macs are hacked nearly as often as PCs, which lead to the February launch of Apple’s notarization process.
This notarization is required for all apps and software designed for macOS. And if the notarization doesn’t exist, a user can’t run the software without a workaround. However, college student Peter Dantini purposefully downloaded malware, fully expecting his Mac to reject the installation. To his surprise, the well-traveled Shlayer adware installed on his machine without issue.
Dantini alerted Apple of the notarized malware on Aug. 28, and Apple immediately revoked the notarization certificates. Unfortunately, two days later, the malware reappeared with a notarization from a different Apple Developer ID. Dantini again alerted Apple of the issue.
Apple addressed the issue, saying, "Malicious software constantly changes, and Apple’s notarization system helps us keep malware off the Mac and allow us to respond quickly when it’s discovered.” The company continued, "Upon learning of this adware, we revoked the identified variant, disabled the developer account, and revoked the associated certificates. We thank the researchers for their assistance in keeping our users safe."
The fact that Apple quickly addressed the situation is reassuring, but this is proof that relying on Apple’s notarization system alone isn’t enough. While it can help prevent most malware, having a strong antivirus and a critical eye for iffy apps is key.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
-
Bigger salaries, more burnout: Is the CISO role in crisis?
In-depth CISOs are more stressed than ever before – but why is this and what can be done?
By Kate O'Flaherty Published
-
Cheap cyber crime kits can be bought on the dark web for less than $25
News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
By Emma Woollacott Published
-
Serious flaws in Microsoft apps on macOS could let hackers spy on users
News The security firm said attackers could bypass permissions for Microsoft apps on macOS and gain privileges without verification
By Emma Woollacott Published
-
LockBit macOS ransomware strain discovered, sparks concerns over shifting tactics
News Researchers noted that while this disclosure should be a cause for concern, the program is currently very buggy
By Ross Kelly Published
-
Google warns of data-stealing macOS bug
News Hackers exploited the flaw to target a Hong Kong media outlet's website and pro-democracy labor and political group
By Danny Bradbury Published
-
New Adload malware bypasses Apple’s XProtect to infect macOS devices
News Old malware retooled to evade Apple defenses
By Rene Millman Published
-
MacBook users warned against EvilQuest ransomware
News The malware aims to encrypt macOS devices, which are typically less affected by ransomware
By Rene Millman Published
-
Researchers blast Swedish developer WakeNet AB for ‘deceptively’ spreading adware
News Bad actors are using tools like 'embed movie' to coax victims into installing software that house adware
By Keumars Afifi-Sabet Published
-
Zacinlo malware threatens Windows 10 PCs' security
News Malware takes screenshots of users' desktops, and has been operating silently for six years
By Keumars Afifi-Sabet Published
-
Mac and Android malware on the rise, reports show
News New research suggest that malware for the two device families has spiked over the past year
By Adam Shepherd Published