The developer of this app is one that we at Malwarebytes have had our eye on since 2015. The developers found a loophole that allowed them to access that data despite Apple’s restrictions. In the case of the list of running processes, the app had to work around blockages that Apple has in place to prevent such apps from accessing that data. Most of this is data that App Store apps should not be accessing, much less exfiltrating. A list of software that you have downloaded and from where.Patrick Wardle has recently posted an article detailing the misbehavior of an app named Adware Doctor, which is exfiltrating the following data: (This is referred to as exfiltrating the data.) Some of this data is actually being sent to Chinese servers, which may not be subject to the same stringent requirements around storage and protection of personally identifiable information like organizations based in the US or EU. Several security researchers have independently found different apps that are collecting sensitive user data and uploading it to servers controlled by the developer. There is a concerning trend lately in the Mac App Store.
