Apple: There's no malware on your Mac

[TheStu]

This is one of the plusses for the AppStore. If you only install things through the AppStore, you run next to no risk in installing a virus or malware.

On a side note, as rampant as viruses and other things are, why in the world do people still fall for these things?

You mean I shouldn't have sent all the money to the Nigerian prince? He seemed like such a nice guy. Bit of a bad speller, but no one is perfect.

 

[LegendKiller]

Apple's lack of a cohesive policy to deal with malware and viruses is finally catching up with it. They've relied on "Security Through Obscurity" for a very long time, all the while claiming to be "more secure" than MS while their acolytes have done the same. Even now, I run into people thinking that OSX is more secure than Windows, I set them straight pretty quickly.

What's sad is that Apple has boxed itself into this corner, which is why they don't really want to recognize the existence of the kit.

I recently purchased a MBP and love it but I didn't buy it for its supposed security.

 

[TheStu]

Apple's lack of a cohesive policy to deal with malware and viruses is finally catching up with it. They've relied on "Security Through Obscurity" for a very long time, all the while claiming to be "more secure" than MS while their acolytes have done the same. Even now, I run into people thinking that OSX is more secure than Windows, I set them straight pretty quickly.

What's sad is that Apple has boxed itself into this corner, which is why they don't really want to recognize the existence of the kit.

I recently purchased a MBP and love it but I didn't buy it for its supposed security.

This is a piece of malware, you install it, it doesn't install itself. The only way any company could have produced an OS that doesn't get malware would be to make it such that;
1: No one can program for it
2: No inbound connections are permitted, no Internet, no USB, no nothing
3: No installation of third party software assuming they can program for it

As an aside, how do you 'set them straight'?

 

[charrison]

This is a piece of malware, you install it, it doesn't install itself. The only way any company could have produced an OS that doesn't get malware would be to make it such that;
1: No one can program for it
2: No inbound connections are permitted, no Internet, no USB, no nothing
3: No installation of third party software assuming they can program for it

As an aside, how do you 'set them straight'?

Maybe integrated malware protection like windows? Maybe stop acting like they are immune to common attacks?

 

[TheStu]

Maybe integrated malware protection like windows? Maybe stop acting like they are immune to common attacks?

I should have put 'this kind of malware'. The kind where you have to give your password to install it.

The Mac App Store has integrated malware protection by virtue of being curated. It is possible that Apple may make it such that they only way to install software on a Mac is through the App Store, not unlike on iOS.

 

[pcgeek11]

It is Apples fault for pushing the myth and it is equally the users fault for their self imposed ignorance and denial.

 

[charrison]

I should have put 'this kind of malware'. The kind where you have to give your password to install it.

This same kind of malware that windows has been dealing with a long time. And for a long time microsoft dealt with it quite poorly. But since vista, the windows security model has been very good.(apps require permission to install, apps run as an unprivileged user by default..). This security model is not much different than OSX, except microsoft went ahead and added integrated anti virus/malware. And for a long time microsoft has had 1800 number to help users resolve their malware issues. Apple better wake up to this reality or it could get very ugly for mac users.

 

[Aikouka]

Hmm after looking at the picture of the memo, it looks like my comment was right, and the original article was just the usual Apple-hate-filled drivel. Surprise .

Unfortunately "Normal" users are going in to that trap just the same.

Complete with their Credit card info

My mom fell for that one that hit Windows about a year back :\.

 

[Ns1]

This same kind of malware that windows has been dealing with a long time. And for a long time microsoft dealt with it quite poorly. But since vista, the windows security model has been very good.(apps require permission to install, apps run as an unprivileged user by default..). This security model is not much different than OSX, except microsoft went ahead and added integrated anti virus/malware. And for a long time microsoft has had 1800 number to help users resolve their malware issues. Apple better wake up to this reality or it could get very ugly for mac users.

MSE stops nothing.


Well maybe not nothing, but it doesn't stop my relatives from getting malware

 

[charrison]

MSE stops nothing.


Well maybe not nothing, but it doesn't stop my relatives from getting malware

And in the end, system security relies very heavily on the end user regardless of OS being used. Trojans by design are there to trick users into doing something they should not do.

 

[JSt0rm]

I would never fall for this but I did let my girlfriend know about it. I admit some users would do this for sure but I really dont know how you can stop someone from installing something on their system they shouldnt.

 

[Ape]

Keep in mind that this asks for your password before installing. So it's not like auto installs like what usually happens in windows land.

People seem to forget that part. If something pops up and asks for you admin password and you didn't initiate the install and you type in your password you deserve to bet bit by the malware bug. lol

 

[Dulanic]

And in the end, system security relies very heavily on the end user regardless of OS being used. Trojans by design are there to trick users into doing something they should not do.

Exactly. Neither OSX or Windows ever have been or ever will be immune to malware or viruses. The downside of Apple is they have fooled their users into thinking it is their OS that prevents these things. It does no such thing. OSX has just been lucky enough to not have been a focus for virus programmers as the amount of macs out there was relatively low.

Now that people see how Apple is reacting to this, I see a future of many more programs written to attack OSX. Apple doesn't seem to want to admit anything and as such it kind of is like a unlocked door to programmers. People will continue to assume both of these things can't attack a mac, as such it is much easier to attack and trick users.

Cliff: Neither OS is 100% secure, and anyone who thinks so is a fool.

 

[Ape]

It's not luck, they are just a small percentage of the market. Why bother with them when MS makes it so easy to exploit.

 

[Nothinman]

I should have put 'this kind of malware'. The kind where you have to give your password to install it.

The Mac App Store has integrated malware protection by virtue of being curated. It is possible that Apple may make it such that they only way to install software on a Mac is through the App Store, not unlike on iOS.

The iOS App Store is the same and yet a few questionable apps have made it through already. Unless Apple can dedicate programmers to reviewing the source code (which would obviously also be required to be made available and non-obfuscated) of every app submitted to both stores there's no way they'll be able to keep all of the bad guys out. Sure the way it is now is better than installing random apps that you found via Google, but it's not like the risk is 100% mitigated.

It's not luck, they are just a small percentage of the market. Why bother with them when MS makes it so easy to exploit.

Because there's enough of them and they obviously have a significant amount of disposable income since they're willing to pay Apple's premiums. Sure with Windows you have a much larger amount of targets but I'd think you'd have a better chance of someone clicking Install, entering their CC#, etc on the Mac side because they believe they're invincible and Steve Jobs will protect them. If you have 10% of the hits and 50% of those hits actually give you their CC# that's still a significant amount of cards.

 

[TheStu]

The iOS App Store is the same and yet a few questionable apps have made it through already. Unless Apple can dedicate programmers to reviewing the source code (which would obviously also be required to be made available and non-obfuscated) of every app submitted to both stores there's no way they'll be able to keep all of the bad guys out. Sure the way it is now is better than installing random apps that you found via Google, but it's not like the risk is 100% mitigated.



Because there's enough of them and they obviously have a significant amount of disposable income since they're willing to pay Apple's premiums. Sure with Windows you have a much larger amount of targets but I'd think you'd have a better chance of someone clicking Install, entering their CC#, etc on the Mac side because they believe they're invincible and Steve Jobs will protect them. If you have 10% of the hits and 50% of those hits actually give you their CC# that's still a significant amount of cards.

Why is it so many people seem to attribute everything that has to do with Apple to Steve Jobs? 'Steve Jobs will protect them', 'Steve Jobs won't let X onto the App Store' 'Steve Jobs doesn't like Y'. Are people doing the same thing with Microsoft and Ballmer, Ubuntu and Mark Shuttleworth, or RIM and Mike Liza..liza...lizard-something and I have just not noticed? Because I don't think they are, and I don't really understand why they do it. Yes, Jobs is a major part of Apple, and has a huge say in the major (and some minor) decisions there, but it isn't like he is personally approving/disapproving individual apps, or things of that nature.

Anyway, your argument that Mac owners have more disposable income, and are therefore ideal targets is fine except... why have they waited until now? Macs have become cheaper over the years, not more expensive. And while there are more users now than ever before, it doesn't change the 'they have more money, so are better targets' angle.

 

[Nothinman]

Why is it so many people seem to attribute everything that has to do with Apple to Steve Jobs? 'Steve Jobs will protect them', 'Steve Jobs won't let X onto the App Store' 'Steve Jobs doesn't like Y'. Are people doing the same thing with Microsoft and Ballmer, Ubuntu and Mark Shuttleworth, or RIM and Mike Liza..liza...lizard-something and I have just not noticed? Because I don't think they are, and I don't really understand why they do it. Yes, Jobs is a major part of Apple, and has a huge say in the major (and some minor) decisions there, but it isn't like he is personally approving/disapproving individual apps, or things of that nature.

Anyway, your argument that Mac owners have more disposable income, and are therefore ideal targets is fine except... why have they waited until now? Macs have become cheaper over the years, not more expensive. And while there are more users now than ever before, it doesn't change the 'they have more money, so are better targets' angle.

Ballmer gets some of the stuff about MS and Gates gets the rest even though he's not involved anymore. I don't think enough people know about Shuttleworth or whoever the hell is the CEO of RIM, hell most people don't even know the company isn't named "Blackberry". I think it's mostly because it seems like Apple is a dictatorship with Jobs at the helm and the company just following his whims whereas those other companies aren't run as directly by their CEO's. Hard to say why public perception is the way it is.

I honestly don't know, I though the Apple crowd was a very juicy target a long time ago and wondered why there weren't even a few semi-big things like this already done. Especially considering how easily OS X and iOS always seem to get broken into in contests. It's possible that the real bad guys just never owned a Mac so they had nothing to develop their malware on, Windows is the defacto standard after all. I would've thought that mobile OSes would be the next big target and maybe this is just a test by someone who just got a Mac in order to write some iOS malware as well. =)

 

[Redfraggle]

LOL...

Silly Apple.

Do not confirm or deny existence of said malware... we wouldn't want all of the people running around claiming their computer can't get a virus to realize they've been misinformed all along.

I honestly can't wait for more malware to get written for mac os just to shut people up about their claims that you can't get a virus. That happens when you have under 10% of market share.

Well, they are right not to. I had this thing pop up on me as well (thanks msnbc, I won't be going to your site anymore). Unless you actually install something, you don't have the malware. You had an attempt by the malware.

As we all know, most people are fucking morons (as evidenced by thinking there's an Apple Web Security team monitoring your moves online and giving the thing your credit card number). However, when you first see it, it would be very easy to not know if something has installed itself or not. Therefore, it would be absolutely a nightmare (and stupid) for Apple to try and diagnose these things over the phone.

Further, Apple should not be held responsible for where you go on the web and what you download. That the thing can be installed is not Apple's fault at all -- tons of things can be installed, it's a computer, you're supposed to install programs.

 

[sourceninja]

I would support a app store if it allowed you to add your own sources (like debian). But the iOS model would push me back to Linux.

 

[MrX8503]

Quite a bit of stereotypes in here.

I own a Mac, but I'm not rich nor am I computer illiterate. I also don't think Steve Jobs is my savior nor do I believe Macs are immune to malware/viruses.

Somehow just because of these stereotypes, Mac owners somehow "deserve" to have their machines infected and it's Apple's fault for making it's consumers ignorant.

AFAIK, ignorant consumers come from all walks of life. I've seen a windows user thinking their DVD drive was a cup holder.

 

[Kaido]

I would support a app store if it allowed you to add your own sources (like debian). But the iOS model would push me back to Linux.

It'd be awesome if Cydia rolled their own for the desktop :awe: :thumbsup:

 

[umrigar]

it's not exactly malware.

it's trickware. there are no infected files. no damaged system files. it doesn't block your access to the internet. it doesn't hijack your browsers. it doesn't delete your files, or send your information out. it doesn't use your Mac as a spam zombie.

it's fake floating windows caused by an app that's easily deleted (move to trash) and a login item removed from the account prefs.

malware... ha!

 

[QueBert]

it's not exactly malware.

it's trickware. there are no infected files. no damaged system files. it doesn't block your access to the internet. it doesn't hijack your browsers. it doesn't delete your files, or send your information out. it doesn't use your Mac as a spam zombie.

it's fake floating windows caused by an app that's easily deleted (move to trash) and a login item removed from the account prefs.

malware... ha!

this, it's absolutely nothing. I fix computers for a living and some of the malware I find like AntiVirus 2008 and PC Health Doctor make the computer unusable even in safe mode. This Mac thing is like that web site that brings up an animated gif that makes it look like it's scanning your computer and says "infected buy now!" but it doesn't do crap besides that. This is basically a flash animation that hopes to trick some suckers into buying a program. It's genius actually because it required no programming experience to make.

I'm not saying Mac's can't get viruses or malware, but in my 10 years of doing on site computer work I've never had a single call from a Mac use complaining about malware.

 

[Nothinman]

it's not exactly malware.

it's trickware. there are no infected files. no damaged system files. it doesn't block your access to the internet. it doesn't hijack your browsers. it doesn't delete your files, or send your information out. it doesn't use your Mac as a spam zombie.

it's fake floating windows caused by an app that's easily deleted (move to trash) and a login item removed from the account prefs.

malware... ha!

It generates popups that you didn't ask for, thus it's malware. It's no worse than the "Anvitirus 2010" crap that infects Windows incessantly asking for a CC# for activation and such but it still counts.

 

[umrigar]

OK, i'll take it back - by definition, it's unwanted software that serves no good purpose, so we can call it Malware. It's still "mostly harmless."

http://www.9to5mac.com/68798/apple-to-issue-mac-os-x-update-in-the-coming-days-to-remove-malware/

http://support.apple.com/kb/ht4650

Summary

A recent phishing scam has targeted Mac users by redirecting them from legitimate websites to fake websites which tell them that their computer is infected with a virus. The user is then offered Mac Defender "anti-virus" software to solve the issue.

This “anti-virus” software is malware (i.e. malicious software). Its ultimate goal is to get the user's credit card information which may be used for fraudulent purposes.

The most common names for this malware are MacDefender, MacProtector and MacSecurity.

In the coming days, Apple will deliver a Mac OS X software update that will automatically find and remove Mac Defender malware and its known variants. The update will also help protect users by providing an explicit warning if they download this malware.