'RecordMapperd Will Damage Your Computer' Message

By GoldSparrow in Mac Malware

Translate To:

RecordMapper is an adware that also includes browser-hijacking features for macOS systems. RecordMapper loads advertisements in the user's browsers, redirects their Web searches, and may interfere with Internet connectivity. Users should delete RecordMapper through compatible anti-adware solutions and avoid traditional installation tactics, such as fake updates.

Table of Contents

Not Quite a New Record in Adware

Adware development tends to burn much of its creativity in finding new ways of tricking users into installing the software and not delivering ingenious new features. RecordMapper, a proof of the concept in action for macOS PCs, is another point in favor of that legally-questionable business model. Although it's not a Trojan, as far as its installation exploits concern themselves, RecordMapper may as well be Black Hat software.

RecordMapper is part of an adware family for macOS, including the Catalina update, that redirects the user's searches to affiliated sites and loads advertisements. The advertisements usually denote themselves by variant-specific tags, in the style of 'Ads by RecordMapper.' Malware experts confirm multiple formats of these potentially-corrupted advertisements, including graphical layer-based content, injected banners and links and pop-ups.

[app] will damage your computer

RecordMapper's family also includes LauncherSetup, ActivityInput, ProtocolStatus, Analyzerwindow and countless others. The installation methods at play are consistent between versions: the adware installs itself after the user installs a fake or bundle-modified update for a media player, such as Flash Player. Unfortunately, it also involves an actual threat in the routine: Adload, a long-running line of Trojan downloaders.

Mapping Ways Out of Advertising Crazes

RecordMapper can generate a characteristic warning message from macOS's default security: a 'RecordMapperd will damage your computer' prompt. Depending on the OS version, the user may see recommended actions such as sending RecordMapper to the Trash. Readers also might note the small typo in RecordMapper's name, which is a fairly common element in other Adload adware.

In most cases, adware doesn't represent the same danger as a Trojan but also is a legitimate security concern. Advertisements from third-party sources may endanger users by loading scripted exploits or tactics, such as other fake update prompts. Effective curating of any software on the computer also demands removing programs like RecordMapper that take over the user's settings against their will.