After SourceForge.net also the popular Apple Mac download site MacUpdate adds adware to the applications offered on the site. Downloads of popular software like Skype, Firefox and 1Password are automatically wrapped with an installer that adds additional software, a browser extensions and changes browser settings.
More @MacUpdate adware installers discovered, for Firefox, 1Password, VueScan, BetterTouchTool, AppCleaner. More certainly to follow...
— Thomas Reed (@thomasareed) November 3, 2015
Users are presented with an User Agreement but it's known most users don't properly read that. If users select 'Quick Install', the installer of MacUpdate adds MacBooster software, adds a browser extension and changes settings of the browser.
According to Thomas Reed from MalwareBytes more and more download sites do the same. Also Download.com and Softonic add adware or third party software in installers, piggybacking on legitimate, and often free, software.
@ArtByAlida @SwiftOnSecurity @Malwarebytes Apple isn't bundling adware. MacUpdate, a third-party website, is.
— Thomas Reed (@thomasareed) November 3, 2015
Also the popular open source hosting website SourceForge was caught bundling adware with downloads. This made popular software like VLC, FileZilla and NotePad++ switch to other hosting sites. Meanwhile many popular antivirus products mark downloads from SourceForge as adware and often block downloads of the site.
Users are advised to only download software from app stores or the official website of the software developer.
