Half a million Mac computers 'infected with malware'

  • Thread starter Thread starter didymus
  • Start date Start date
Status
Not open for further replies.
D

didymus

Guest
BBC:
Half a million Mac computers 'infected with malware’
Its report claims that about 600,000 Macs have installed the malware - potentially allowing them to be hijacked and used as a “botnet”.
The firm, Dr Web, says that more than half that number are based in the US.
Apple has released a security update, but users who have not installed the patch remain exposed.
Code:
     Flashback was first detected last September when anti-virus  researchers flagged up software masquerading itself as a Flash Player  update. Once downloaded it deactivated some of the computer's security  softwareLater versions of the malware exploited weaknesses in the Java  programming language to allow the code to be installed from bogus sites  without the user's permission.
Remote control
Code:
    Dr Web said that once the Trojan was installed it sent a  message to the intruder's control server with a unique ID to identify  the infected machine.
     "By introducing the code criminals are potentially able to  control the machine," the firm's chief executive Boris Sharov told the  BBC.
Code:
     "We stress the word potential as we have never seen any  malicious activity since we hijacked the botnet to take it out of  criminals' hands. However, we know people create viruses to get money. 
     "The largest amounts of bots - based on the IP addresses we  identified - are in the US, Canada, UK and Australia, so it appears to  have targeted English-speaking people."
:rotfl: :rotfl: :rotfl:

And they said it couldn’t be done.
My theory: with cellphones and iEverything taking over the world soon hacckers won’t even bother going after desktops/laptops.
 
BBC:

:rotfl: :rotfl: :rotfl:

And they said it couldn’t be done.
My theory: with cellphones and iEverything taking over the world soon hacckers won’t even bother going after desktops/laptops.
This is a trojan horse. This can happen on any system. Basically it’s equivalent to say an Instant Messaging app pretending to be a Flash player upgrade. You have to download the program, run it and give your password. In contrast PC viruses are software which spread by themselves, without user interaction.

The trojan horse thing can happen on any machine, including Linux, and Windows.

If you don’t download funny updates and programs from dodgy sites you will be OK.

Note that Mac has had computer malware before. In the early 90s there were numerous viruses before Apple switched to OSX.
 
The trojan horse thing can happen on any machine, including Linux, and Windows.
Except that, in the case of Linux, there are very few and you don’t have to pay for the privilege either.
 
Except that, in the case of Linux, there are very few and you don’t have to pay for the privilege either.
There’s also very little software for Linux. So for most people running Linux is not an option. It’s also not as polished. And there are many hardware-software issues.

BTW blame Oracle for this debacle.

On further reading of the Dr Web page, and it’s an anti-virus vendor so take them with a pinch of salt, the applet may run without user interaction.
 
There’s also very little software for Linux. So for most people running Linux is not an option. It’s also not as polished. And there are many hardware-software issues.
I’d disagree with the ‘most people’ question. Most people only use a limited range of software - browser, office suite, messaging and so on - and that’s not a problem because they’re either there at installation of Linux or in the software repositories (what’s really missing is a ‘Photoshop’).

As to the question of ‘polish’ and hardware issues, I’ll admit that, with a new distro, it can be a few weeks before everything runs as smoothly as with your previous distro - Ubuntu 12.04 is coming up, for example, and it’s best to wait a while before moving from 11.10.

Of course, it’s unknown for people to have problems with new Windows versions. 😃
 
I’d disagree with the ‘most people’ question. Most people only use a limited range of software - browser, office suite, messaging and so on - and that’s not a problem because they’re either there at installation of Linux or in the software repositories (what’s really missing is a ‘Photoshop’).
I don’t know. Most people probably want to make photo slide shows on DVD, rip music / video to mp3/portable media player, read on Kindle readers (on PC), play games, use MS Word, edit their vacation videos and photos. PC wins hands down and Mac comes a close second for all of these. In fact with the Mac you have your iDVD, iMovie and DVD player included. iWork is cheaper than MS Office and reads/writes those files pretty well.
As to the question of ‘polish’ and hardware issues, I’ll admit that, with a new distro, it can be a few weeks before everything runs as smoothly as with your previous distro - Ubuntu 12.04 is coming up, for example, and it’s best to wait a while before moving from 11.10.
Right. And why waste time. Time you could spend on working or doing actual fun, you know, 🙂 being with your loved ones and friends, etc.
Of course, it’s unknown for people to have problems with new Windows versions. 😃
Most software works with Windows and OSX, even new versions. The problems lie sometimes in high end software like AutoCAD or Final Cut Pro where being an early adopter is dangerous, especially if you rely on the software compatibility for your livelihood, but then you’re prolly a power user/professional and you’ve probably waited for the 1st or 2nd service pack to come out before adopting the new OS. I switched to Snow Leopard two years after it came out. I’m not going to Lion yet as I have no need to and everything I have works well enough.

BTW
according to
f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml
to check if your Mac is infected, one can:

Open up Terminal (type Terminal into Spotlight and click on Terminal.app)
then type:
defaults read /Applications/Safari.app/Contents/Info LSEnvironment
followed by pressing ENTER
and
**defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
**
and again press ENTER

Then you should see:
*The domain/default pair of (/Applications/Safari.app/Contents/Info, LSEnvironment) does not exist
*
and
*
The domain/default pair of (/Users/username/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist
*

You see the above, if your system is clean. 🙂
 
Just to add, the lameness of most of these “drive by” exploits, i.e. visit a site and have your browser automatically load some dodgy bit of code, is chiefly because internet browsers these days do much more than simply render text and pictures, they execute code to allow for fancy websites and in-browser run software. None of these things are essential but they add to the eye candy bells and whistles appeal of the world wide web.

Without that nonsense, computing across all platforms would be much safer. As you’d actually have to download a pirated or dodgy program first and run it. Few people would do that.
 
Bits are the computer robots in which attacker send the command to the bots via SMTP server and takes the benefit.It can be avoided by taking antivirus support.
 
Come on, the “I don’t know” is a rhetorical device in response you what you said. I’m actually surprised you’re rah-rahring for Linux and saying it’s ready for ordinary computer users, the vast majority of whom would not know where to obtain a copy, would not be able to get it working with their latest ebook reader, camera, cell phone, photo frame etc. and who want simple and elegant solutions. Anyway maybe we live in different worlds but the luddites I know (and even IT linux fanboys) all tend to use Windows or OSX. Anyway let’s not go more off topic. It’s kinda like, “I compile my kernels in Linux but play CounterStrike in Windoze.” 🙂
 
Used PC all my life. Bought a Mac. Never gone back…😉
By the way, OS X Lion is built on a Unix foundation, just go to the terminal and nerd out:thumbsup:
 
BBC:

:rotfl: :rotfl: :rotfl:

And they said it couldn’t be done.
My theory: with cellphones and iEverything taking over the world soon hacckers won’t even bother going after desktops/laptops.
This isn’t a virus, this is a trojan horse, this asks for permission to screw your computer over first and if you don’t give it your password it can’t. The whole Macs can’t get viruses thing is like a corporation installing a key card system to prevent unauthorized access and then a person willing gives away their key card to someone to get in.
 
Come on, the “I don’t know” is a rhetorical device in response you what you said. I’m actually surprised you’re rah-rahring for Linux and saying it’s ready for ordinary computer users, the vast majority of whom would not know where to obtain a copy, would not be able to get it working with their latest ebook reader, camera, cell phone, photo frame etc. and who want simple and elegant solutions. Anyway maybe we live in different worlds but the luddites I know (and even IT linux fanboys) all tend to use Windows or OSX. Anyway let’s not go more off topic. It’s kinda like, “I compile my kernels in Linux but play CounterStrike in Windoze.” 🙂
Actually, I was responding to your approach in the post I was responding to, which rather reminded me of the kinds of sales people who often tend to inhabit computer stores - who are great at showering customers with factoids but whose eyes glaze-over when you ask them questions.

Which particular Linux distro did you fail to put your photos on DVD with?
 
This isn’t a virus, this is a trojan horse, this asks for permission to screw your computer over first and if you don’t give it your password it can’t. The whole Macs can’t get viruses thing is like a corporation installing a key card system to prevent unauthorized access and then a person willing gives away their key card to someone to get in.
I got an iMac just a few weeks ago, and was at my local Apple store last night asking this very question, and they confirmed what you said - Trojan, not a virus. If you don’t enter your password when the inappropriate pop-up appears, you’re OK. They said the press was wildly misreporting the facts of this issue.
 
We’ve both had computers since we were students (we’ve even built them between us) in the '80’s (we even had RISC computers in the early 90’s so we were there long before iPads) and we’ve been through the trials and tribulations of Windows in every version - the one I’m replying on is dual boot Windows 7 and Ubuntu 11.10.

My Notebook (which came with cut-down Windows 7) was immediately formatted to be stand-alone Ubuntu. It’s a wonderful little machine that goes with me everywhere and does everything (including being the dumping ground for the ridiculous number of photos we take on our annual holidays in Italy). Its predecessor, a now 10 year-old Laptop, started performing with the speed of treacle under the mass of XP updates so it now runs Lubuntu instead and does all the normal ‘browser/office suite/music’ etc things it used to do when it was new, at the equivalent of its original speed.
 
Flashback the largest Mac malware threat yet, experts say
Congratulations, Apple. The Mac is now popular enough to attract major attention from the bad guys.

news.cnet.com/8301-1009_3-57410702-83/flashback-the-largest-mac-malware-threat-yet-experts-say/
Apple, which declined to comment on the Flashback malware, announced plans to tighten up security in the next major version of Mac OS X, due for release this summer, with a feature called Gatekeeper. The new protection tool offers to keep users safe by requiring that developers register with Apple to have their applications signed and verified by Apple. Users can then choose whether they want to keep their computers from installing software that hasn’t been signed by a registered developer.
“The approach they’re taking is two-pronged: Gatekeeper to make you download stuff that has at least some checking for malicious code, and antivirus [XProtect] baked into the OS for when you happen to get hit,” Miller said. “On the grand scheme, they have the right ideas, they just haven’t been keeping up on things like they should.”
(Personally, Fedora 14 Gnome 2 and holding for the life of my PC.)
 
And this is why you don’t sell your products as safer when you rely on security through obscurity - especially when you are no longer obscure.

Yep, when getting a new computer, you always need to do research. In fairness to the sales people, the stores hire people who aren’t well paid, and who usually make more money from selling flashy systems. They have no reason to know much beyond that.
As a point of interest this PC has three Operating Systems. Windows 7 premium home, Windows XP and LInux Red Hat. I’d like to roundly condemn the wonderful people at Microsoft for their approach to allowing users to run Windows 7 in a mode emulating XP. Unless you have Windows 7 professional you have to upgrade (for the sum of around £200) or possibly buy a physical copy of Windows 7 professional. Alternatively you can download a niftty little program for free from Oracle Virtual machines and if you have a physical copy of XP or another OS you can install it and create a virtual machine. The one downside been that it is recommended you have a PC with a fair amount of RAM and a fair bit of spare hard drive space before trying that. I’ve found this invaluable though for getting some peripherals for which there were no drivers for Windows 7 working again and to allow me to transfer information as a result.
My old computer had Windows 7 Ultimate (Microsoft had a deal when it was first released, $30). My new computer has Professional (Purchased for its ability to read high memory addresses), and I’ve had no luck getting XP set up in a virtual machine. You’re probably better off with it as a separate install. 😉
 
I got an iMac just a few weeks ago, and was at my local Apple store last night asking this very question, and they confirmed what you said - Trojan, not a virus. If you don’t enter your password when the inappropriate pop-up appears, you’re OK. They said the press was wildly misreporting the facts of this issue.
If they’re telling you you’re ok because it is a trojan rather than a virus, they’re misreporting facts.

A virus is a program that self replicates. Many viruses do nothing other than take up system resources.

A trojan is a program that gives someone access to your computer. They are always malicious.

A virus is certainly preferable to a trojan. Viruses are harder to get rid of but less likely to do something really bad.
 
Status
Not open for further replies.
Back
Top