{"id":417431,"date":"2011-05-04T15:38:03","date_gmt":"2011-05-04T15:38:03","guid":{"rendered":"http:\/\/www.ghanamma.net\/2011\/05\/04\/is-mac-under-a-virus-attack\/"},"modified":"2011-05-04T15:38:03","modified_gmt":"2011-05-04T15:38:03","slug":"is-mac-under-a-virus-attack","status":"publish","type":"post","link":"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/","title":{"rendered":"Is Mac under a virus attack?"},"content":{"rendered":"
\n

No. But there’s some bad news rising on the Apple malware front<\/strong><\/p>\n

\"\"<\/a><\/p>\n

Bogus MAC Defender virus scan. Source: Intego<\/p>\n<\/div>\n

Let’s see if we can handle this one as a Q&A.<\/p>\n

Q: Is there a Mac OS X virus loose on the Internet?<\/strong> Technically, no. As far as I know, no Mac OS X virus has ever been detected in the wild. But there are other kinds of Mac malware<\/a> out there that you should know about.<\/p>\n

Q: Like what?<\/strong> The immediate concern, ironically, is a bogus antivirus program called “MAC Defender<\/a>” that targets Mac OS X users running Safari.<\/p>\n

Q: What does MAC Defender do?<\/strong> According to a memo released Monday by the computer security site Intego<\/a>: 1) It runs a fake Windows virus scan animation and announces that your computer is infected. 2) It runs a real Mac installation program and asks for your\u00a0administrator password. 3) Once installed, it makes your computer act like it really is infected, opening offensive websites and generally misbehaving. 4) It offers you 1-year, 2-year or lifetime protection. 5) If you buy the protection, it steals your credit card number.<\/p>\n

Q: Is this the start of the long-awaited Macpocalypse<\/a>?<\/strong> No, but someone has started selling a $1,000 crimekit that could produce a new wave of malware targeting Apple (AAPL<\/a>) computers.<\/p>\n

Q: What’s a malware crimekit?<\/strong> It’s a fill-in-the-blanks program of the kind organized cybercrime gangs have been using for years to generate Microsoft (MSFT<\/a>) Windows malware. With a do-it-yourself toolkit, a criminal with limited programming skills can infect millions of computers.<\/p>\n

\"\"<\/a><\/p>\n

Weyland-Yutani BOT crimekit. Source: CSIS<\/p>\n<\/div>\n

Q: What’s this new Mac crimekit, and what does it do?<\/strong> According to an alert published Monday by the Danish security firm CSIS<\/a>, it’s a Windows program called “Weyland-Yutani BOT” that supports “Web injects” and “form grabbing” on Firefox for the Mac. (Safari and Chrome reportedly in the works, as well as Linux and iPad versions.) Web injects can put new language into trusted websites and form grabbers can capture passwords and credit numbers entered by unsuspecting users. (Video of the toolkit in action below.)<\/p>\n

Q: So are Macs now as dangerous as Windows PCs?<\/strong> Not by a long shot. Last fall, the computer security team at Sophos Labs<\/a> reported that they were seeing one or two attacks on Macs each week<\/em>, compared with tens of thousands per day<\/em> against Windows PCs. Moreover, the two newest Mac malware threats haven’t really begun in earnest. Intego describes MAC Defender as “rare,” and according to CSIS, Weyland-Yutani BOT is still flying under the radar.<\/p>\n

Q: Should Mac users install anti-virus software?<\/strong> That’s your (or your IT administrator’s) call. This could change, but I’ve found anti-virus programs for the Mac to be more trouble than they’re worth — witness the havoc a program like MAC Defender can cause.<\/p>\n

\"\"<\/a>Q: What else can Mac users do to protect themselves?<\/strong> Don’t download programs unless they come from trusted sources, like an Apple App Store. Unless you have absolute confidence in the site that is asking for it, never give up your computer password, your social security number or your credit card information. And as an extra precaution, uncheck “Open ‘safe’ files after downloading” in Safari Preferences\/General.<\/p>\n

Below: A YouTube video<\/a> showing Weyland-Yutani BOT in action.<\/p>\n

<\/span> <\/p>\n

Also on<\/strong> Fortune.com<\/a>:<\/p>\n

Follow Philip Elmer-DeWitt on Twitter @philiped<\/a><\/p>\n<\/div>\n

More:
\nIs Mac under a virus attack?<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

No. But there’s some bad news rising on the Apple malware front Bogus MAC Defender virus scan. Source: Intego Let’s see if we can handle this one as a Q&A<\/p>\n","protected":false},"author":0,"featured_media":417433,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":{"0":"post-417431","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-entertainment"},"yoast_head":"\nIs Mac under a virus attack? - Ghanamma.com<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Is Mac under a virus attack? - Ghanamma.com\" \/>\n<meta name=\"twitter:description\" content=\"No. But there's some bad news rising on the Apple malware front Bogus MAC Defender virus scan. Source: Intego Let's see if we can handle this one as a Q&A\" \/>\n<meta name=\"twitter:creator\" content=\"@ghanamma\" \/>\n<meta name=\"twitter:site\" content=\"@ghanamma\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"Is Mac under a virus attack?\",\"datePublished\":\"2011-05-04T15:38:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/\"},\"wordCount\":574,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#primaryimage\"},\"thumbnailUrl\":\"\",\"articleSection\":[\"Entertainment\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/\",\"url\":\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/\",\"name\":\"Is Mac under a virus attack? - Ghanamma.com\",\"isPartOf\":{\"@id\":\"https:\/\/www.ghanamma.com\/2011\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#primaryimage\"},\"thumbnailUrl\":\"\",\"datePublished\":\"2011-05-04T15:38:03+00:00\",\"author\":{\"@id\":\"\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#primaryimage\",\"url\":\"\",\"contentUrl\":\"\"},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.ghanamma.com\/2011\/#website\",\"url\":\"https:\/\/www.ghanamma.com\/2011\/\",\"name\":\"Ghanamma.com\",\"description\":\"News In Ghana - Latest Ghana News Headlines\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.ghanamma.com\/2011\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Is Mac under a virus attack? - Ghanamma.com","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/","twitter_card":"summary_large_image","twitter_title":"Is Mac under a virus attack? - Ghanamma.com","twitter_description":"No. But there's some bad news rising on the Apple malware front Bogus MAC Defender virus scan. Source: Intego Let's see if we can handle this one as a Q&A","twitter_creator":"@ghanamma","twitter_site":"@ghanamma","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#article","isPartOf":{"@id":"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/"},"author":{"name":"","@id":""},"headline":"Is Mac under a virus attack?","datePublished":"2011-05-04T15:38:03+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/"},"wordCount":574,"commentCount":0,"image":{"@id":"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#primaryimage"},"thumbnailUrl":"","articleSection":["Entertainment"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/","url":"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/","name":"Is Mac under a virus attack? - Ghanamma.com","isPartOf":{"@id":"https:\/\/www.ghanamma.com\/2011\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#primaryimage"},"image":{"@id":"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#primaryimage"},"thumbnailUrl":"","datePublished":"2011-05-04T15:38:03+00:00","author":{"@id":""},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ghanamma.com\/2011\/05\/04\/is-mac-under-a-virus-attack\/#primaryimage","url":"","contentUrl":""},{"@type":"WebSite","@id":"https:\/\/www.ghanamma.com\/2011\/#website","url":"https:\/\/www.ghanamma.com\/2011\/","name":"Ghanamma.com","description":"News In Ghana - Latest Ghana News Headlines","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ghanamma.com\/2011\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.ghanamma.com\/2011\/wp-json\/wp\/v2\/posts\/417431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ghanamma.com\/2011\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ghanamma.com\/2011\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ghanamma.com\/2011\/wp-json\/wp\/v2\/comments?post=417431"}],"version-history":[{"count":0,"href":"https:\/\/www.ghanamma.com\/2011\/wp-json\/wp\/v2\/posts\/417431\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ghanamma.com\/2011\/wp-json\/wp\/v2\/posts\/417433"}],"wp:attachment":[{"href":"https:\/\/www.ghanamma.com\/2011\/wp-json\/wp\/v2\/media?parent=417431"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ghanamma.com\/2011\/wp-json\/wp\/v2\/categories?post=417431"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ghanamma.com\/2011\/wp-json\/wp\/v2\/tags?post=417431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}