

I ran MacKeeper and came up with nothing. Within the hour, I had some weird stuff in my downloads folder, and there were images labeled with strange lines of code in the finder toolbar and the toolbar at the top of Pages. Upon doing that, my system was instantly taken over by multiple popup windows that didn't respond well to keystrokes and multiplied by the dozens. I launched the installer again thinking that maybe it didn't go since my mom was the one who helped with the images, and she isn't exactly tech savvy. But still under the impression that the thing was a normal Adobe update, I entered my info and clicked "ok." All was good for about an hour, when I discovered that Spotify was still demanding an update and wouldn't play. By then, I think the Malware had already installed itself, and entering my password only allowed it to go deeper into my system and probably handed the hackers the keys to my digital kingdom on a silver platter. The next dialogue was accessible and asked for my Apple ID and password. After that, I was taken to another unlabeled image that asked if I was ready to install Flashplayer and had an "install now" button. I could tab around enough to tell that it was asking me to agree to those terms of service that very few people actually read, but I had to enlist sightling assistance to check the box inside the image. At this point, I was presented with a lovely unlabeled image. I've gotten this popup in the past when I've downloaded updates straight from the Adobe website, so I clicked right past it. I launched the installer package from the downloads folder with command + o and was immediately given the security popup saying that the application was downloaded from an unknown source, and was I sure I wanted to open it.

A file called "Flashplayer.pkg" was downloaded, which now that I think about it, that should've been a flag because the real updates have always been in. I didn't think twice about clicking the download button since I know Spotify requires Flash to play, and I've installed updates in the past for that reason. It had the Adobe logo and seemed completely legit.

It first appeared about a week ago in the form of a popup window on Spotify saying that I couldn't listen to Spotify content until Adobe Flashplayer was updated. I can find lots of info about a "Flashback Trojan" that appeared a while ago, but I believe this is a new version of the thing that's gotten worse. This probably isn't typically what would go in this forum, but I think you need to know because there isn't much info on it that I can find, and it really caused complete chaos with Voiceover for me. I just wanted to share an experience I had with a fake Adobe Flash updater that contains some pretty scary and extremely annoying Malware.
