[Swordmaker]

Mysterious Mac Malware Has Infected Victims for Years — Fruitfly. I suspect that given the limited promulgation of this malware the most likely mode of infection is physical access to the Mac, not Phishing or any kind of Trojan, otherwise it would have been discovered long before now. — PING!

Apple Mac Malware That's Been Hiding Out For Years
Ping!

The latest Apple/Mac/iOS Pings can be found by searching Keyword "ApplePingList" on FreeRepublic's Search.

If you want on or off the Mac Ping List, Freepmail me

[BullDog108]

Very very interesting. So how is implanted on the victim’s Mac?

[faucetman]

Shouldn’t a “mac” attack be called a burgerfly?

[Flick Lives]

That screenshot of Fruitfly “victims” shows a lot of root accounts. How was the root account even activated as it is off by default on OS X, and activating it is non-trivial.

[Dr. Sivana]

FruitFly doesn't seem made by a nation-state because it's not sophisticated enough,

If it sat on a number of Macs for 5 to 10 years undetected, it is sophisticated enough.

[usconservative]

Interesting article. The part that strikes me is that the simplicity of the malware is the "beauty" of it. Difficult to determine who made it or why, or even how it got onto the "victims" computers in the first place. The simplicity appears to also be the reason why it went undetected for so long.

Still, "hundreds" of Mac's that are "infected" compared to the how many thousands or tens of thousands of Windows PC's that get infected with some form of malware on a daily basis seems small by comparison.

Now that I think about it, how do we know that "fruitfly" isn't an NSA created malware and these hundreds of Mac's aren't just a test bed?

[VTenigma]

NSA, CIA, FBI

[dfwgator]

Where are Macs built again?