An AppleCare support rep talks: Mac malware is "getting worse"

ZD Net ^ | May 18, 2011 | Ed Bott

[Izzy Dunne]

There is a virus called MacDefender

It is NOT a virus, it does not propagate itself.

ONe has to download it and allow the system to install it.

[This Just In]

“Just don’t believe that a farmhouse is more secure than a townhouse just because nobody has ever broken in.”

(spoken in a slight monotone and dry voice)
You, my friend, have never lived in a farmhouse, have you? :^)

[MrEdd]

Mac's low market penetration (in numbers of machines, not profit) previously rendered them a target not worth the effort.

As the market fragments, Apple users can expect to be targeted more.

[Bubba Ho-Tep]

Basically, don’t believe anyone who tells you that Macs are safe from Viruses or Malware. Always have anti-virus and anti-Malware software installed and running.

The irony, of course, is that this particular malware masquerades as an anti-virus application. It only works on people who are worried about viruses.

[Loud Mime]

I had a recent virus infect my Desktop PC. I was using windows defender and the germ went right past that ‘protection’

Somebody told me that if I had hit the ‘reset’ button immediately, the computer would not have been infected.

Does anybody know if that is true?

Anyway, I’m back to using ESET NOD32 on my system. I’ve never had a problem with it.

[mnehring]

Good point. RnMomof7, don’t click any link to download anti-virus software. Buy it on your own, understand what it looks like and what its messages say and don’t click anything that looks like that.

[AnotherUnixGeek]

An AppleCare support rep talks: Mac malware is "getting worse"

Well, yeah - security through obscurity only works if the "obscure" part holds. Apple products are now popular enough to get attention from malware coders too.

[discostu]

They were probably wrong. Most of the really nasty viruses that hit windows are aiming at system files that are in use when you’re using it, they queue to overwrite on reboot so if you do so they’re fully embedded. If you think you’re nailed on windows you need to start running scans immediately and don’t reboot until you’re clean. Basically the opposite of how you fix every other windows problem.

[LoneStarGI]

Apple has a very good product, but the fact is that for the longest time the Mac was not the OS ‘of choice’ for the majority of the world. As a result, hackers and virus makers simply ignored it. Now, due in large part to Apple’s dominance over the mobile device market (iPhone, iPad, et al), Apple has taken a huge step into the forefront, which has now attracted the attention of those previously uncaring hackers. Apple needs to stay ahead of them and reinforce their systems, and not just believe their systems are impervious. Otherwise, they’ll be playing catchup like Microsoft for the rest of time.

[PA Engineer]

Yep. Malware. Later in the article:

EB: So customers who get hit by this are installing it and giving their admin password?

AC: Yes.

EB: if they stop before that, nothing bad happens?

AC: Yes, the file will download but for it to install it requres the password....

EB: Ah yes, social engineering.

AC: Indeed, looks rather real, if you ignore the fact it pops up in your browser…

[Bubba Ho-Tep]

Mac's low market penetration (in numbers of machines, not profit) previously rendered them a target not worth the effort.

Hackers have created a virus to infect iPods that have been hacked to run Linux, a number that might run to the high three figures globally. Security by obscurity simply doesn't fly.

[papertyger]

“Real world” my a$$!

The “real world” is windows lepers have spent twenty years pointing at the mac users cold sore and shrieking “SEE!”

[PA Engineer]

I think that the virusmakers are working their butts off as they try to damage a good system.

This is malware and not a virus. I don't know how you fix people.

[Dr. Bogus Pachysandra]

From page 2 of the article;

“EB: So customers who get hit by this are installing it and giving their admin password?

AC: Yes.

EB: if they stop before that, nothing bad happens?

AC: Yes, the file will download but for it to install it requres the password. it tries to trick you into giving it by saying its required to remove the infections.

EB: Ah yes, social engineering.

AC: Indeed, looks rather real, if you ignore the fact it pops up in your browser… but for most of us that know computers that’s a giveaway there.”

Don’t give out your password!

[DonaldC]

LOL.. Leper vs cold sore....love it!

[Loud Mime]

I was writing of virusmakers - - I understand the difference between trojans and viruses.

But, like the Obama/Osama thing, mistakes are made. Take it easy.

[deks]

FREE Sophos Anti-Virus for Mac Home Edition

http://www.sophos.com/en-us/products/free-tools/sophos-antivirus-for-mac-home-edition.aspx

“Sophos Anti-Virus for Mac Home Edition is available to download at no charge, with no time limit, and requiring no registration, protecting home Mac users against all known malware, including both Mac and Windows-specific threats such as Trojan horses, viruses, worms and spyware. Based on Sophos’s flagship security software, currently protecting over 100 million business users worldwide, Sophos Anti-Virus Home Edition for Mac was released in response to growing concern about Mac malware.”

[rokkitapps]

That’s what I was thinking from the article. It calls itself anti-virus software, but you have to actively download it.

[PA Engineer]

Dude. You should step away from the computer for a bit. Apply some skin thickener and than come back and read the posts again.

There is a "hugh" difference between malware and virus. Which one is more "series", I don't know. You can't fix people who will believe a pop up alert from a website. That is "series" and unfixable. Still have not seen a self-replicating virus for OS. When one appears some day, then it will be "series".

You left out one of the key points in your post. If you don't like people responding, then do not post or try to be more honest.

[Waryone]

A while back, I got Sophos for my iMac. Sophos is the company that provides anti-virus protection for Mac servers and businesses. They offered a free program that would protect regular Macs. For browser, I use Safari and Firefox, and Chrome on occasion. I haven’t had any problems at all since I’ve installed it.

I saw the Mac Defender pop up once, but since I’m already protected, I just deleted it.

Here are two articles, one from CNET and one from Cult of Mac. They can give you more information about it.

http://reviews.cnet.com/8301-13727_7-20022243-263.html

http://www.cultofmac.com/sophos-anti-virus-for-mac-review/68681