Adware distributed as a Flash Player installer

Very few Mac malware is signed by a valid certificate, making Mughthesec quite unique among its peers. Their research uncovered an evolved threat that includes a MAC-address-based anti-VM detection system and is signed by a valid Apple developer certificate, allowing it to pass undetected by Apple's GateKeeper system. Nonetheless, it was a recent tweet that got the top Mac malware security researchers on the trail of Mughthesec, with intent to break it down and see how the adware - you ever hear about Mac Malware called Mughthesec? My kid's computer has it, and it seems to have AV detection code in it /4Cs58dBlg3 I just wiped it but thanks for the write up! I can confirm it’s been there for at least 6 months when I found it on my parents MacBook.

Other researchers say they've seen Mughthesec around for at least six months. Looks like a new variant of something we call OperatorMac (though that may be a bad name). This new adware's name is Mughthesec, and according to Thomas Reed, an expert in Mac malware at Malwarebytes, it's a new and improved version of the older OperatorMac family that's been haunting Mac users for quite some time. A new family of Mac adware is bound to cause some headaches to infected victims, as the only way to remove it and its secondary payloads is by reinstalling macOS from scratch, according to the expert opinion of Patrick Wardle, Director of Research at Synack and a well-known Mac malware researcher.

Is advanced mac cleaner legit