On February 1, 2018, we investigated suspicious download links for Firefox, Onyx, and Deeper. We have since performed a rigorous investigation of multiple files to track and remove any other affected URLs. We discovered several links which downloaded files containing a new malware threat, specifically a Bitcoin mining framework. If you believe that you may have downloaded one of these files during the brief period when the links were available on MacUpdate then we strongly encourage you to take the following steps to detect and remove any unwanted files that may be present on your Mac as a result of these downloads.
- Download and unzip the following AppleScript application that will search for and remove these malicious files: https://goo.gl/jM6jXi (raw script available here: https://goo.gl/o2tjj2)
- Launch the AppleScript application, the script will run and will show one of the following two messages. Note: this will uninstall Firefox, Onyx, and Deeper and they will have to be re-downloaded again.
- If bitcoin miner files were detected and deleted, restart your Mac to finalize the process.
MacUpdate takes the security of Mac users very seriously. We regret any disruption this may have caused. Thanks to the help of the MacUpdate community, we were able to quickly identify this threat and contain its spread by removing the malicious links. If you have any questions or concerns regarding this issue, you can reach out to us at support@macupdate.com.