AdvancedServices

Mac users should be on the lookout for yet another intrusive PUP (Potentially Unwanted Program) that can severely disrupt the user experience on the devices it manages to get installed on. PUPs are almost never distributed through the normal channels. Instead, these applications are typically hidden in a bundling scheme or being injected into fake software installers or updates.

Once deployed on the Mac successfully, AdvancedServices will initiate both adware and browser hijacker routines. The application will be responsible for generating an endless stream of dubious and unwanted advertisements on the system. The advertisements could present questionable content by themselves or try to lure users into engaging with them via various social-engineering tactics. Users who click on the advertisements risk being redirected to suspicious or outright unsafe destinations.

AdvancedServices also will establish control over the user's Web browsers. The goal is to substitute the current homepage, new tab page, and default search engine with a new, sponsored address. In the vast majority of cases where browser hijackers are involved, the promoted address belongs to a fake search engine incapable of delivering any results on its own. The search queries initiated by the user will be redirected to a legitimate engine or a dubious one. In the second option, the produced results may be of low quality and filled with ad links.

Another intrusive capability associated with PUPs is data-tracking. Most applications of this type will try to collect the entire browsing history, search history and every clicked link. The acquired data will be combined with numerous device details (IP address, geolocation, ISP, browser type, model type, etc.) and then transmitted to a remote server.