Netskope Threat Labs

UpdateAgent

ATP Sandbox Adv. Heuristics

UpdateAgent is a macOS trojan whose operators have progressively upgraded its capabilities, with researchers documenting its evolution from simple downloader to more persistent and capable implant across multiple versions.

First seen
May 2023
Last seen
October 2026
Alert Name
MacOS.Trojan.UpdateAgent