It's True: Mac Malware Exists

But the good news is that for now, you can avoid it.

The current Mac malware you may have heard about is called MacDefender (alternative names include MacProtector and MacSecurity). They pose themselves as anti-virus software, but are really rooting for credit card and personal information.

Here's how it works (thanks to CompuCraft for the succinct rundown): When a user clicks an infected link, they are redirected and a file automatically begins to download. The trojan then makes use of a feature in Safari that automatically opens 'safe' files after downloading. This allows the trojan to open an installer screen that will ask for an administrator's password to install MacDefender. Once the program is installed, it sets itself to open on startup, and will frequently pop up warnings stating that the computer is infected when it actually is not. The application states that MacDefender is not licensed, and viruses can only be scanned for and not removed. It is at this point that the application tries to get users to hand over payment information.

How can I protect myself from Mac viruses?
The simplest answer: know your download sources. Don't click on any pop-up ads, and don't mindlessly enter your administrator password. Many applications that will be installed on your computer will ask for your password. If you aren't 100% sure where the application came from, do not enter your password. The first thing to do is make sure that when seeing a web page that looks like a Finder window, and purports to be scanning your Mac, you know that this is bogus. Leave the page, and quit your web browser. If anything has downloaded, and the Installer application has opened, quit it right away; look in your Downloads folder for the file, then delete it. Next, users should uncheck the “Open ‘safe’ files after downloading” option in Safari’s General preferences.

I think I may have clicked on something. How can I remove it?
First of all, if you think you may have installed malware, and entered your credit card information, contact your bank immediately. Your personal information is probably more important than your computer. Next, you can contact us, or try to uninstall it yourself. TUAW has a great comprehensive guide to MacDefender prevention and removal here.

Do I need to install real antivirus software?
It's something to consider. If you have any questions about your computer, are interested in talking about virus protection, or think you may have come across malware, contact us. We'll get you sorted out and on the path to a healthy Mac.

Blogs

Upcoming Events


	It's True: Mac Malware Exists 's blog Login or register to post comments But the good news is that for now, you can avoid it. The current Mac malware you may have heard about is called MacDefender (alternative names include MacProtector and MacSecurity). They pose themselves as anti-virus software, but are really rooting for credit card and personal information. Here's how it works (thanks to CompuCraft for the succinct rundown): When a user clicks an infected link, they are redirected and a file automatically begins to download. The trojan then makes use of a feature in Safari that automatically opens 'safe' files after downloading. This allows the trojan to open an installer screen that will ask for an administrator's password to install MacDefender. Once the program is installed, it sets itself to open on startup, and will frequently pop up warnings stating that the computer is infected when it actually is not. The application states that MacDefender is not licensed, and viruses can only be scanned for and not removed. It is at this point that the application tries to get users to hand over payment information. How can I protect myself from Mac viruses? The simplest answer: know your download sources. Don't click on any pop-up ads, and don't mindlessly enter your administrator password. Many applications that will be installed on your computer will ask for your password. If you aren't 100% sure where the application came from, do not enter your password. The first thing to do is make sure that when seeing a web page that looks like a Finder window, and purports to be scanning your Mac, you know that this is bogus. Leave the page, and quit your web browser. If anything has downloaded, and the Installer application has opened, quit it right away; look in your Downloads folder for the file, then delete it. Next, users should uncheck the “Open ‘safe’ files after downloading” option in Safari’s General preferences. I think I may have clicked on something. How can I remove it? First of all, if you think you may have installed malware, and entered your credit card information, contact your bank immediately. Your personal information is probably more important than your computer. Next, you can contact us, or try to uninstall it yourself. TUAW has a great comprehensive guide to MacDefender prevention and removal here. Do I need to install real antivirus software? It's something to consider. If you have any questions about your computer, are interested in talking about virus protection, or think you may have come across malware, contact us. We'll get you sorted out and on the path to a healthy Mac. Submitted by Anonymous on Fri, 05/20/2011 - 09:16 Public Content