Veröffentlicht von VMRay:

Good Apps Behaving Badly: Dissecting Zoom’s macOS Installer Workaround

It seems like overnight half the world switched to working from home and depending on Zoom for daily human interaction. Our own team is no exception, so it came as a surprise that the widely-used application installs itself on Macs by working around Apple’s regular security, demonstrating behavior commonly associated with malware.

In a clear case of “good apps behaving badly”, I noted in my original Twitter post that Zoom’s Mac app installer uses pre-installation scripts and displays a password dialog pretending to be an OS prompt.

Mehr Informationen und technische Details finden Sie auf der VMRay-Website (in englischer Sprache).