Do Son The “Calendar 2” app on the Mac App Store was recently exposed to the existence of a mining script, digging Monero without the user’s permission, and even more serious is the fact that Apple officials have been informed for at least 24 hours. There has been no corresponding action on this application.
According to objective-see, there are additional options in the Calendar 2 application that allow users to unlock paid features in the app through mining. However, this app will default to mining operations regardless of whether the user activates this option.
What is strange enough is that although this application publicly supports the mining of cryptocurrencies, Apple has not dealt with this application accordingly. Then Ars Technica of the foreign media asked Apple whether the app was in line with the App Store’s review strategy, but it has not received a response. And 24 hours after Ars contacted Apple, the app still appears in the Mac App Store.
After Q2, the developer of Calendar 2 in an interview with foreign media Ars, has decided to remove this feature from the app. Qbix founder Gregory Magarshak stated that due to the BUG, the current mining process has become very complicated, has not achieved the desired results, and will continue to operate without user permission. Other BUGs take up a lot of Mac resources.
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
