There have been multiple reports about new tabs opening in Mac users’ Safari browsers without any interaction on their side.
What is causing the new tabs to be opening like this is a Trojan known as OSX/NewTab, or just NewTab Trojan. Even though the first samples of this malware appeared in April and the majority of security solutions detect the NewTab Trojan, users are still in danger and should be protected against the threat.
Continue reading to learn how to deal with this malware-related issue and how to restore your Mac to normal.
|Type||Trojan and Adware for Mac OS|
|Short Description||A Trojan that generates the opening of new tabs in Safari.|
|Symptoms||The unsupervised opening of new tabs in the affected browser.|
|Distribution Method||Spam email attachments, cracked software, unsafe browsing|
|Detection Tool|| See If Your System Has Been Affected by malware |
NewTab Trojan – More Information
Most Trojans are hiding in spam email attachments or cracked and pirated software and torrents. The NewTab Trojan could be uploaded as a fake e-mail attachment that may seem legitimate, presented in the form of an invoice or another seemingly important document. Third-party download sites are also at fault for the distribution of Trojans.
Such downloads can be:
The opening of new tabs that redirect the users to particular pages may not be the only intrusive activity. The Trojan may also be utilized to perform any of the following actions on your Mac:
- Download malware and other unwanted software.
- Update itself and create copies of itself to remain persisten on the infected Mac.
- Log the keystrokes you type.
- Obtain your financial information.
- Obtain data on the sites you visit.
- Obtain your saved passwords.
- Take screenshots.
- Tap into your camera or microphone.
- Obtain information concerning your Mac and IP address.
- Steal files.
In addition, the Trojan could be generating ads to interrupt your browsing. The Trojan could be at fault for the display of pop-ups and banners, browser redirects and push notifications, and search results that appear to be sponsored.
Note that the ads that may be displayed by the NewTab Trojan could eventually land you on potentially malicious pages, deployed for tech-support scams, malware downloads, etc.
A malware which is similar to the NewTab Trojan is the OSX/Linker malware. The malware was targeting a specific macOS Gatekeeper security flaw. The bug could allow a malicious binary downloaded from the internet to bypass Gatekeeper’s scanning process. Here’s how to remove OSX/Linker malware.
Remove NewTab Trojan – Instructions
In order to get rid of the NewTab Trojan, we recommend that you follow the removal instructions below. They are made to help you get rid of this malware step by step. For a full and effective removal of the malware, you can download and install an advanced malware removal tool.
Before starting to follow the steps below, be advised that you should first do the following preparations:
- Backup your files in case the worst happens.
- Make sure to have a device with these instructions on standy.
- Arm yourself with patience.
Step 1: Uninstall NewTab Trojan and remove related files and objects
1. Hit the ⇧+⌘+U keys to open Utilities. Another way is to click on “Go” and then click “Utilities”, like the image below shows:
- Go to Finder.
- In the search bar type the name of the app that you want to remove.
- If all of the files are related, hold the ⌘+A buttons to select them and then drive them to “Trash”.
In case you cannot remove NewTab Trojan via Step 1 above:
You can repeat the same procedure with the following other Library directories:
Tip: ~ is there on purpose, because it leads to more LaunchAgents.
Step 2: Remove NewTab Trojan – related extensions from Safari / Chrome / Firefox
Step 3: Scan for and remove NewTab Trojan files from your Mac
When you are facing problems on your Mac as a result of unwanted scripts and programs such as NewTab Trojan, the recommended way of eliminating the threat is by using an anti-malware program. SpyHunter for Mac offers advanced security features along with other modules that will improve your Mac’s security and protect it in the future.