Netskope Threat Labs

Shlayer

ATP Sandbox Adv. HeuristicsAVNetskope IPS

Shlayer is a trojan that proliferates adware and other unwanted applications and promotes fake search engines. It disguises itself as Adobe Flash Player installers and software cracking tools, and users typically encounter it on torrent websites full of intrusive advertisements and deceptive downloads.

First seen
February 2022
Last seen
October 2026
Alert Name
MacOS.Backdoor.Shlayer
MacOS.Downloader.Shlayer
MacOS.Trojan.Shlayer
Trojan.MAC.Shlayer.DDJ
Trojan.MAC.Shlayer.DDM
Trojan.MAC.Shlayer.DDQ
Trojan.MAC.Shlayer.DDT
Trojan.MAC.Shlayer.E
Trojan.MAC.Shlayer.H
Trojan.MAC.Shlayer.L