Maker of sneaky Mac adware sends security researcher cease-and-desist letters
Found on ZDNet on Wednesday, 13 December 2017

The short version is that the adware, built by Israeli ad-tech firm TargetingEdge, poses as a legitimate installer, like a video player or document reader. Like other software, the installer asks for the user's password to install, tricking the user into turning over root privileges to the installer. Once it's hooked into the system, the installer uses a script to download further components from the adware's command and control server.
TargetingEdge sent cease-and-desist letters to try to prevent Serper from publishing his research.
That would make an interesting lawsuit.