{"id":14535,"date":"2013-05-23T11:28:23","date_gmt":"2013-05-23T18:28:23","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=14535"},"modified":"2016-10-06T12:09:24","modified_gmt":"2016-10-06T19:09:24","slug":"another-problematic-softonic-installer-brings-adware","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/","title":{"rendered":"Another Problematic Softonic Installer Brings Adware"},"content":{"rendered":"<p>You may recall that <a href=\"https:\/\/www.intego.com\/mac-security-blog\/softonic-download-site-briefly-delivers-trojan-adware-installer\/\">Softonic recently drew much ire<\/a> for a short-lived but troubling installation package that surreptitiously delivered adware to people trying to install two popular applications &#8211;\u00a0 UnRarX and VLC. It looks like they&#8217;re at it again.<\/p>\n<p>A recent blog post on <a href=\"http:\/\/www.thesafemac.com\/genieo-adware-downloaded-through-fake-flash-updates\/\">The Safe Mac<\/a> drew our attention to a report of a fake Flash alert that led to a fake installer\u00a0download. At the time of the report, the fake alert detected OS X browsers and delivered a Genieo installation disk image:<\/p>\n<ul>\n<li>InstallGenieo.dmg (SHA256 44eae526f3ec2dd071cec4a1ff0d25bc8209a040739e62a0588dfabce476f1d6)<\/li>\n<\/ul>\n<p>The fake alert currently delivers a Windows executable, regardless of browser version.<\/p>\n<p><strong>The Genieo and Softonic connection<\/strong><\/p>\n<p>Previous versions of the Genieo installer were opt-in, and the installer asked for a password. This most recent delivery method required neither and was clearly trying to trick users into thinking the installer was something other than it really was.<\/p>\n<p>The Genieo application is written in Java. The application resources contain:<\/p>\n<ul>\n<li>Installed files dynamic libraries<\/li>\n<li>A Firefox add-on<\/li>\n<li>A Mac helper tool<\/li>\n<li>A Mac notification tool<\/li>\n<li>The Java applet<\/li>\n<li>&#8220;Partner&#8221; settings<\/li>\n<\/ul>\n<p>It&#8217;s within these &#8220;Partner&#8221; settings that we find some interesting information, in the most recent installer variant that&#8217;s delivered by fake alert. Within this file:<\/p>\n<ul>\n<li>Genieo.app\/Contents\/Resources\/Java\/Partner\/genTugM\/conf\/partner.plist<\/li>\n<\/ul>\n<p>We find this text:<\/p>\n<ul>\n<li>\u00a0&lt;key&gt;partner.manifest.base.url&lt;\/key&gt;<br \/>\n&lt;string&gt;http:\/\/download.genieo.com\/partner\/softonicM\/&lt;\/string&gt;<\/li>\n<\/ul>\n<p><a href=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/partner.png\"><img loading=\"lazy\" class=\"aligncenter size-full wp-image-14539\" src=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/partner.png\" alt=\"partner\" width=\"600\" height=\"352\" srcset=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/partner.png 600w, https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/partner-150x88.png 150w, https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/partner-300x176.png 300w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><\/p>\n<p>The Java applet itself also contains references to Softonic.<\/p>\n<p><a href=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/jar.png\"><img loading=\"lazy\" class=\"aligncenter size-full wp-image-14541\" src=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/jar.png\" alt=\"jar\" width=\"600\" height=\"201\" srcset=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/jar.png 600w, https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/jar-150x50.png 150w, https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/jar-300x100.png 300w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><\/p>\n<p>Running the adware in a virtual environment confirmed traffic containing references to Softonic in URLs.<\/p>\n<p><a href=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/PCAPSoftonic.png\"><img loading=\"lazy\" class=\"aligncenter size-full wp-image-14543\" src=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/PCAPSoftonic.png\" alt=\"PCAPSoftonic\" width=\"600\" height=\"105\" srcset=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/PCAPSoftonic.png 600w, https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/PCAPSoftonic-150x26.png 150w, https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/05\/PCAPSoftonic-300x52.png 300w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><\/p>\n<p>This led us to the Genieo app generator for Genieo and their <a href=\"http:\/\/genieo-helper.appspot.com\/download.html\">list of partners<\/a>. While there is no explicit reference to Softonic there, but the genTugM partner installer still points to a Genieo version that contains text referencing Softonic.<\/p>\n<p><strong>The Installer in Action<\/strong><\/p>\n<p>Upon running the file, the installer performs a number of notable actions:<\/p>\n<ul>\n<li>gathering the user&#8217;s kernel mode (32 or 64 bits) and system version<\/li>\n<li>checking if Java is installed, and recommending to install it, as the Genieo application requires it<\/li>\n<li>changing browser search provider<\/li>\n<li>asking for admin privileges<\/li>\n<li>downloading Genieo.dmg<\/li>\n<li>downloading and installing third party products like Codec-M and Qtrax<\/li>\n<li>reporting installation status to analytics<\/li>\n<\/ul>\n<p>Once Genieo.dmg is downloaded, it installs Genieo.app and adds it to the Login Items so that it will be restarted at login. It also installs a Launch Agent:<\/p>\n<ul>\n<li>\/Library\/LaunchAgents\/com.genieo.engine.plist<\/li>\n<\/ul>\n<p>Along with two dynamic libraries:<\/p>\n<ul>\n<li>\/usr\/lib\/libgenkit.dylib<\/li>\n<li>\/usr\/lib\/libgenkitsa.dylib<\/li>\n<\/ul>\n<p>Libgenkit.dylib is added to OS X&#8217;s global launchd configuration file:<\/p>\n<ul>\n<li>\/etc\/launchd.conf<\/li>\n<\/ul>\n<p>This dynamic library injects the second, libgenkitsa.dylib, into Safari when the browser is launched. This enables it to intercept searches on Google, Bing and Yahoo and silently redirect them to Genieo or its partner engine.<\/p>\n<p><a href=\"https:\/\/www.intego.com\/virusbarrier\">Intego VirusBarrier<\/a> users with up-to-date virus definitions will detect the components of this threat as <strong>OSX\/Genieo<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>You may recall that Softonic recently drew much ire for a short-lived but troubling installation package that surreptitiously delivered adware to people trying to install two popular applications &#8211;\u00a0 UnRarX and VLC. It looks like they&#8217;re at it again. A recent blog post on The Safe Mac drew our attention to a report of a [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":8755,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[190,5],"tags":[323,475,86,2833,375],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v17.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<meta name=\"description\" content=\"You may recall that Softonic recently drew much ire for a short-lived but troubling installation package that surreptitiously delivered adware to people\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Another Problematic Softonic Installer Brings Adware - The Mac Security Blog\" \/>\n<meta property=\"og:description\" content=\"You may recall that Softonic recently drew much ire for a short-lived but troubling installation package that surreptitiously delivered adware to people\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/\" \/>\n<meta property=\"og:site_name\" content=\"The Mac Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2013-05-23T18:28:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2016-10-06T19:09:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/MalwareAlert.png\" \/>\n\t<meta property=\"og:image:width\" content=\"400\" \/>\n\t<meta property=\"og:image:height\" content=\"260\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Lysa Myers\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#organization\",\"name\":\"Intego\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/\",\"sameAs\":[],\"logo\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#logo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"contentUrl\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"width\":875,\"height\":875,\"caption\":\"Intego\"},\"image\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#logo\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#website\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/\",\"name\":\"The Mac Security Blog\",\"description\":\"Keep Macs safe from the dangers of the Internet\",\"publisher\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.intego.com\/mac-security-blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/MalwareAlert.png\",\"contentUrl\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/MalwareAlert.png\",\"width\":\"400\",\"height\":\"260\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#webpage\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/\",\"name\":\"Another Problematic Softonic Installer Brings Adware - The Mac Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#primaryimage\"},\"datePublished\":\"2013-05-23T18:28:23+00:00\",\"dateModified\":\"2016-10-06T19:09:24+00:00\",\"description\":\"You may recall that Softonic recently drew much ire for a short-lived but troubling installation package that surreptitiously delivered adware to people\",\"breadcrumb\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.intego.com\/mac-security-blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Another Problematic Softonic Installer Brings Adware\"}]},{\"@type\":\"Article\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#webpage\"},\"author\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/12b11624d5a648c576d8dce6f93b230a\"},\"headline\":\"Another Problematic Softonic Installer Brings Adware\",\"datePublished\":\"2013-05-23T18:28:23+00:00\",\"dateModified\":\"2016-10-06T19:09:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#webpage\"},\"wordCount\":506,\"commentCount\":3,\"publisher\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/MalwareAlert.png\",\"keywords\":[\"Adware\",\"Genieo\",\"Malware\",\"OSX\/Genieo\",\"Softonic\"],\"articleSection\":[\"Malware\",\"Security News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#respond\"]}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/12b11624d5a648c576d8dce6f93b230a\",\"name\":\"Lysa Myers\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/783af524dca7753ceb3cd9a576398a0e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/783af524dca7753ceb3cd9a576398a0e?s=96&d=mm&r=g\",\"caption\":\"Lysa Myers\"},\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/author\/lysam\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"description":"You may recall that Softonic recently drew much ire for a short-lived but troubling installation package that surreptitiously delivered adware to people","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/","og_locale":"en_US","og_type":"article","og_title":"Another Problematic Softonic Installer Brings Adware - The Mac Security Blog","og_description":"You may recall that Softonic recently drew much ire for a short-lived but troubling installation package that surreptitiously delivered adware to people","og_url":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/","og_site_name":"The Mac Security Blog","article_published_time":"2013-05-23T18:28:23+00:00","article_modified_time":"2016-10-06T19:09:24+00:00","og_image":[{"width":"400","height":"260","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/MalwareAlert.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Written by":"Lysa Myers","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Organization","@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization","name":"Intego","url":"https:\/\/www.intego.com\/mac-security-blog\/","sameAs":[],"logo":{"@type":"ImageObject","@id":"https:\/\/www.intego.com\/mac-security-blog\/#logo","inLanguage":"en-US","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","width":875,"height":875,"caption":"Intego"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#logo"}},{"@type":"WebSite","@id":"https:\/\/www.intego.com\/mac-security-blog\/#website","url":"https:\/\/www.intego.com\/mac-security-blog\/","name":"The Mac Security Blog","description":"Keep Macs safe from the dangers of the Internet","publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intego.com\/mac-security-blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","@id":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#primaryimage","inLanguage":"en-US","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/MalwareAlert.png","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/MalwareAlert.png","width":"400","height":"260"},{"@type":"WebPage","@id":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#webpage","url":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/","name":"Another Problematic Softonic Installer Brings Adware - The Mac Security Blog","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#primaryimage"},"datePublished":"2013-05-23T18:28:23+00:00","dateModified":"2016-10-06T19:09:24+00:00","description":"You may recall that Softonic recently drew much ire for a short-lived but troubling installation package that surreptitiously delivered adware to people","breadcrumb":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.intego.com\/mac-security-blog\/"},{"@type":"ListItem","position":2,"name":"Another Problematic Softonic Installer Brings Adware"}]},{"@type":"Article","@id":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#article","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#webpage"},"author":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/12b11624d5a648c576d8dce6f93b230a"},"headline":"Another Problematic Softonic Installer Brings Adware","datePublished":"2013-05-23T18:28:23+00:00","dateModified":"2016-10-06T19:09:24+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#webpage"},"wordCount":506,"commentCount":3,"publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/MalwareAlert.png","keywords":["Adware","Genieo","Malware","OSX\/Genieo","Softonic"],"articleSection":["Malware","Security News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.intego.com\/mac-security-blog\/another-problematic-softonic-installer-brings-adware\/#respond"]}]},{"@type":"Person","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/12b11624d5a648c576d8dce6f93b230a","name":"Lysa Myers","image":{"@type":"ImageObject","@id":"https:\/\/www.intego.com\/mac-security-blog\/#personlogo","inLanguage":"en-US","url":"https:\/\/secure.gravatar.com\/avatar\/783af524dca7753ceb3cd9a576398a0e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/783af524dca7753ceb3cd9a576398a0e?s=96&d=mm&r=g","caption":"Lysa Myers"},"url":"https:\/\/www.intego.com\/mac-security-blog\/author\/lysam\/"}]}},"jetpack_featured_media_url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/12\/MalwareAlert.png","jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4VAYd-3Mr","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/14535"}],"collection":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/comments?post=14535"}],"version-history":[{"count":11,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/14535\/revisions"}],"predecessor-version":[{"id":51631,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/14535\/revisions\/51631"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/media\/8755"}],"wp:attachment":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/media?parent=14535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/categories?post=14535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/tags?post=14535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}