Half a million Mac computers 'infected with malware'

[TVC_Colwal]

Tweet

More than half a million Apple computers have been infected with the Flashback Trojan, according to a Russian anti-virus firm.

Its report claims that about 600,000 Macs have installed the malware - potentially allowing them to be hijacked and used as a "botnet".

[adammayall]

Apple were recklessly slow in pushing out the update but in the interest of balance...

1. As of last night, there was no evidence that any of the machines had been compromised.

2. OS X requires you to put in your password to allow system files to be changed. In order for Flashback to be installed, people had to give it permission. As a general Mac safety tip - do not give something permission unless you are sure where it has come from and why it's asking for it.

3. Having either Microsoft Office or Skype on your system prevented it from installing. Also if it detected the presence of any security software (including Little Snitch) it wouldn't install.

4. Run Software Update now to patch yourself. (Apple Logo -> Software Update) - you should see an update to Java.

It's not Apple's code that was compromised but because they control the release of Java for the mac, it meant that there was almost a two week gap between exploit discovery and it being patched.

[JasonFWard]

I was extremely pleased when I read that, not because I want infected computers but because it will at last wipe the smug smiles of Apple fanbois.

Now of course as a Linux user I also think that serves as a wake up call for me and my fellows.

But still, I can't get past being pleased at seeing Apples infected.

[JasonFWard]

In order for Flashback to be installed, people had to give it permission. As a general Mac safety tip - do not give something permission unless you are sure where it has come from and why it's asking for it.

You certain about that? That's exactly the opposite of what I read elsewhere.

[adammayall]

You certain about that? That's exactly the opposite of what I read elsewhere.

http://www.f-secure.com/v-descs/troj...shback_i.shtml

Apologies - I misread slightly - the malware is loaded, but differently (and in a way that would be completely blocked in the next version of OS X...)

Also - remember that there are linux distros that are just as vulnerable to this kind of thing (e.g. most people wait for updates to something like Java to be pushed to say an apt repository before updating - and even then don't update for a few days). It should be a warning to all *nix users that thanks to cross-system software like Java, we're all at risk.

[TVC_H4U]

Should have gone to Windows, hehe.

Its rare you see apple with this kind of thing, lets see how fast they can react.

[JasonFWard]

Also - remember that there are linux distros that are just as vulnerable to this kind of thing (e.g. most people wait for updates to something like Java to be pushed to say an apt repository before updating - and even then don't update for a few days). It should be a warning to all *nix users that thanks to cross-system software like Java, we're all at risk.

Indeed, nix kernels are still as close to impossible to infect as were probably ever going to get, but who needs to infect the kernel when you can live and work your infectious dark magic in the GUI software (I've seen demo virus's for both KDE and Gnome).

[37408]

goes to show that ALL can be hacked and exploited...no-one and i mean no-one is safe especially when connected online, each day/week a new virus, trojan, worm is out. i had one nasty that malwarebytes didnt detect till it auto installed on lappy, i DIDNT install BTW as said was an auto install. i managed to kill it within less than an hour before it took hold fully and without the aid of an AV as the virus disabled ALL .exe programs.

[tacoben]

We all know that they can be hacked. People just do not put as much effort into doing it. I am still struggling with some Mac software that my boss insists I use so I have concluded my brain is just not capable of the OSx way.

[37408]

lol no its all ready to use programs these days, no-one actually puts any time to a hack now...even if its a small one on your own PC like i accidently did the other day while setting my WIFI to connect to my router and ended up hacking into my own WIFI, set it up as unsecured without needing any password, shows how really secure they are doent it, and it actually worked on and as unsecured .