
Apple has taken down one of its top-ranked paid utility app, Adware Doctor, from its Mac App Store. The app acted as a film on the MacOS to prevent malware and malicious files from infecting the device. It was removed from the app store due to violation of Apple’s policies.
Adware Doctor was found to be sending user data gained by it to a server in China without the permission of its users. According to a security researcher Patrick Wardle, the app collected user information like web browser history, app logs, etc from the machine it was installed on. After the data is collected, the app then packages it into a password protected zip file and sends it over to a server located in China for archiving.
Also Read: Apple bans Alex Jones app for objectionable content
This app was able to collect sensitive user information and send it to the Chinese server because of Apple’s sandboxing protection policies. Due to the app being a malware scanner, it didn’t require any permissions to access the local home directory and files of a system, and during scans, it would collect all the sensitive information and send it out as a report package to the Chinese server.
Also Read: Mozilla releases Firefox 62 with variable fonts, automatic dark theme on macOS
Apple will be implementing a much stricter sandboxing security policy with the launch of MacOS 10.14 Mojave, which will keep apps like Adware doctor in check.