PortalFlow

Mac users have to be on the lookout for a new PUP (Potentially Unwanted Program) aiming to infiltrate their computers and devices stealthily. The application is named PortalFlow and, as most PUPs, it is being spread via deceptive tactics such as bundling. If users do not check the 'Custom' or 'Advanced' installation settings of the programs they install, they could be allowing the intruder application onto their Macs unknowingly. 

Once established on the system, PortalFlow will try to monetize its presence by running an intrusive advertising campaign. The generated advertisements could take various forms and be displayed as pop-ups, banners, surveys, in-text links and more. The important thing to remember is that the advertisements could be employed as deceptive tactics to lure users into clicking on them equally. Doing so may trigger forced redirects leading to shady or unsafe websites.

The intrusive functionality of PortalFlow doesn't stop there though. The PUP also will take control over the user's Web browsers. It will adjust specific settings (the homepage, new tab page, and the default search engine) and set them to open a sponsored address. Browser hijackers are most commonly involved in the promotion of fake search engines. These engines cannot generate any results. They will either redirect to a legitimate engine, such as Yahoo, Bing, and Chrome or go to a dubious engine delivering inaccurate results filled with sponsored links. 

Users should keep in mind that PUPs and fake search engines are known for spying on their browsing activities. The gathered data could include all conducted searches, visited pages and clicked links. Usually, numerous device details (IP address, OS version, geolocation, and more) also will be exfiltrated.