UpdateAgent
- First seen
- 2021-09-15 00:00:00
- Malware type
- downloader
- Family
- Malware family
- Profile updated
- 2026-07-07 14:37:54
Targeted industries: technology-and-telecommunications retail-and-hospitality
Targeted regions: country_code:us country_code:ca country_code:au
Context
UpdateAgent is a malware family primarily targeting macOS systems. It is known for its ability to evolve and has been used to deliver other malicious payloads. It often masquerades as legitimate software updates to deceive users.
Detection coverage
- 2 YARA rules
Detection rules
- SEKOIA_Implant_Mac_Smoothoperator_Update_Agent (yara-rule)
- SIGNATURE_BASE_MAL_3Cxdesktopapp_Macos_Updateagent_Mar23 (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Osx.Update Agent (report)
- Microsoft — The Evolution Of A Mac Trojan Updateagents Progression (report)
- jamf.com — Updateagent Adapts Again (report)
- esentire.com — Updateagent Macos Malware (report)
- twitter.com — 1532442456343691273 (report)