Anti-Virus for Mac Blog

Flashback: Malware made for Me and You

2012-06-27T22:18:00.001-07:00

The Mac Flashback malware was made for me and you: Mac users. The malware was a huge threat that affected more Macs than any other virus in history. When it all went down in April, Intego did a good job describing in detail what Flashback is capable of doing and why hackers infected computers with it. As Mac users take heed of the warning that Macs are now vulnerable to malware, it's clear that Flashback has raised the visibility of the Mac malware situation.

Even though more people now understand that Macs are not immune to malware, overall security knowledge among Mac users still lags. It's understandable, specific details about the Flashback malware are not easy to wrap your head around. That is until Intego broke it down into its simplest terms. Here's an infographic showing how the Flashback Trojan horse infected Macs.

Source:Intego

What is OSX/Koobface.A?

2012-02-15T23:36:00.000-08:00

If you've ever wondered what the heck Facebook and other security news sites are talking about when they mention "Koobface," I decided this might be a good blog entry to explain the OS X version in simple terms. Koobface is a computer worm that first targeted users of social networking sites Facebook and Twitter.

Intego’s most elite Mac Virus hunters determined the Trojan horse OSX/Koobface.A affects the Mac OS X platform, too. Someone might encounter Koobface.A from links on Facebook, MySpace and Twitter, or from some other dark corners of the inner-webs. If you're one of these unfortunate, unsuspecting Mac users, then you would be taken to a page so you can view a video, which is when the malicious Java applet loads.

As normal with Mac security, first you would be alerted to this by way of the standard Mac OS X Java security alert. Allow the malware to run on your Mac and it will attempt to download files from one or more remote servers. If your Macs have Anti-Spyware activated, which they say comes with antivirus for Mac, I know that Intego software will alert you to an outgoing connection by Java.

If your Macintosh does not have anti-virus threat filters, and malicious files are downloaded, Mac security experts say these files include elements designed to infect Mac OS X, Windows and Linux. According to Facebook Security and Intego's most elite Mac Virus hunters, there is evidence of several malware infections in the wild.

If you think you're infected, you might be asking yourself: Does my Mac have a Virus?

Credit Card Number STOLEN on the Internet?

2012-02-13T09:53:00.000-08:00

Greetings Mac user! Has your debit or credit card number been STOLEN on the Internet?

Check it now!

OK, so this probably won't work on the better 99.9% of us Mac users on the Internet. The truth is most of us know how to keep our privacy on the Internet, but is smarts enough security to keep us most safe? Not all scams are so obvious to ask nicely: Can I have your credit card number?

Lost credit cards or stolen debit card numbers are liability issues, and ID thieves do exist and they are looking for your stolen credit card number. One way for them to get your stolen credit card number on the Internet is simply to ask you, disguised as a kind, gentle (or perhaps fun) software program, completely unlike the Mac OS X malware that it is. The bad news is that this tactic has become more common on the Macintosh platform.

Mac malware code writers have become quite sophisticated and sneakier in their approach to get you to give up your credit and debit accounts. A sophisticated hackers tactic? The evil Trojan horse. According to SearchSecurity, a Trojan horse may be widely redistributed as part of a computer virus. This type of Mac malware is bad news for any Apple Mac, plain and simple, and it sucks if your computer gets infected with it.

Using stolen credit card numbers is obviously a crime, yet criminals use stolen credit card numbers all the time. The most widely known Trojan horse for Macs is MacDefender, which Intego's Mac Virus hunters discovered in May 2011. The MacSecurity / MacGuard / MacDefender / MacShield fake antivirus (Trojan horse) worked like this:

The best Mac security recommendation is to not give hackers a chance! But what do you do about it? Some Mac OS X users ask: Antivirus for Mac, really? Protecting your Mac and data is important, and I know of a few ways to keep you safer on the Internet and away from having a lost or stolen credit card number. There is no 100% method. However as I mentioned before, I am here to answer one question: Do we really need Anti-Virus for Mac?

Could this be a Mac Virus or a Trojan?

2012-02-10T20:11:00.000-08:00

Malware: OSX/flashback.A

You're sitting there minding your own business, just browsing the Web on your new MacBook Pro. Mac antivirus? Nah, you were told you don't need it. So you're at your desk or office, or wherever, and you know you've never downloaded any Adobe software. Yet, you get an "Adobe Flash Player Install Manager" out of nowhere and it says "Update Adobe Flash Player" at the top. It might even look similar to the image on the right (credit: Intego).

As a Mac user, you're not alone. Many Mac users have found themselves in this unfamiliar, Windows-esque role unsure why an Adobe Flash Player install manager randomly popped up on their MacBook Pro.

I know, I know, you might be thinking: Do I need Antivirus for Mac?

Intego was the first to discover the Mac malware in September 2011, which they're calling the Flashback Trojan horse. Intego's Anti-Virus for Mac identifies the malware as OSX/flashback.A. Since first spotting this malware, a number of new variants surfaced in the wild; a variant discovered in October 2011 reportedly damaged some system files.

Well, so, aside from all that bad news, I've got some bad news for you. As it turns out, Intego, again, those anti-malware, Mac virus hunting, anti-phishing, Apple security experts did it again! They discovered a new variant of the Flashback Trojan horse, but this one is able to install itself on a Mac with much more limited user intervention. There is no more installer, and no request for a password.

Dude what the flip! Antivirus for Mac, really?

It's going to be a long year.

The Mac Security Blog further analyzed the newest variant of the Mac Flashback Trojan horse. You might consider checking out the report to mitigate any risk of having this malware installed on your Mac with no intervention on your part.

Does my Mac have a Virus?

2012-02-09T23:41:00.000-08:00

For my first blog post ever I will attempt to answer the question: Does my Mac have a Virus?

Is the Internet safe for Macs?

Mac experts at Intego reported that the year 2011 was the most active year for Mac malware in the history of Mac OS X. However, if you're asking me whether or not your Mac is infected with a virus or Mac malware, I know of just a few ways to find out.

One method is to scan your machine to see if it's infected with a Mac virus. Or perhaps it might be infected with other viruses that your Mac can share with other computers or a network and affect Windows operating systems. Now, you might be asking: Antivirus for Mac, really?

It's going to be a long year.