Half a million Mac computers 'infected with malware'

[Dakota_Roberts]

Flashback the largest Mac malware threat yet, experts say
Congratulations, Apple. The Mac is now popular enough to attract major attention from the bad guys.

news.cnet.com/8301-1009_3-57410702-83/flashback-the-largest-mac-malware-threat-yet-experts-say/

(Personally, Fedora 14 Gnome 2 and holding for the life of my PC.)

Apple is dealing with the situation as we speak.

Apple plans to release software that will detect and remove Flashback malware infections on the Mac, the company announced Tuesday. In a knowledge base link published late in the day, Apple explained that it’s aware of the infection—which takes advantage of a previously unpatched Java vulnerability—saying that the software was coming, but no specific release date was given.

In addition to the Flashback detection software, Apple said that it’s “working with ISPs worldwide” to disable the botnet’s command and control (C&C) servers. Kaspersky researcher Kurt Baumgartner told Forbes earlier on Tuesday that “Apple is taking appropriate action by working with the larger Internet security community to shut down the Flashfake [also known as Flashback] C2 domains,” and Apple’s latest efforts seem to coincide with Baumgartner’s statement.

“Apple is developing software that will detect and remove the Flashback malware,” Apple wrote. “In addition to the Java vulnerability, the Flashback malware relies on computer servers hosted by the malware authors to perform many of its critical functions. Apple is working with ISPs worldwide to disable this command and control network.”

We have been covering the Mac Flashback trojan since 2011, but the malware recently picked up steam. Last week, Russian security firm Dr. Web reported that it had infected more than half a million Macs worldwide. (The aforelinked Forbes report claimed Apple tried to take down Dr. Web’s sinkhole server for Flashback, but it seems most likely that this was an accidental inclusion in Apple’s attempts to take down the botnet’s C&Cs.)

There are already a couple ways to detect and remove a Flashback infection, but they involve some Terminal kung-fu that less experienced users might not feel comfortable with. Apple’s solution will undoubtedly target mainstream users who have heard about Flashback and want to ensure their Macs remain malware-free.

arstechnica.com/apple/news/2012/04/apple-to-release-flashback-removal-software-working-to-take-down-botnet.ars

If they’re telling you you’re ok because it is a trojan rather than a virus, they’re misreporting facts.

A virus is a program that self replicates. Many viruses do nothing other than take up system resources.

A trojan is a program that gives someone access to your computer. They are always malicious.

A virus is certainly preferable to a trojan. Viruses are harder to get rid of but less likely to do something really bad.

You have to give a trojan admin level access for it to hurt you, no password, no damage, whereas viruses don’t need permission, they just manage it.

 

[didymus]

One question (and I’m sorry I started the whole OS debate): what’s going on with hacking cell phones and other devices?
There have been stories that other countries are going cashless, largely using cell phones for payments. Won’t that be the new frontier for bad guys?

 

[Tenofovir]

Actually, I was responding to your approach in the post I was responding to, which rather reminded me of the kinds of sales people who often tend to inhabit computer stores - who are great at showering customers with factoids but whose eyes glaze-over when you ask them questions.

Cool, ad hominem attacks. That shows your position is weak. BTW This particular Mac exploit also works on Linux systems - just that there is no payload attached to it for Linux systems.

Which particular Linux distro did you fail to put your photos on DVD with?

I have yet to find a boxed Linux distro, a boxed DVD/photo editing app and a camera/hardware which guarantees that it works with Linux. Perhaps I shop at the wrong stores. Perhaps the bundled versions of Paint Shop Pro/Photoshop Elements/PS Lite come in Linux flavours too…?

And no-one says it’s not possible with Linux, but it’s difficult, and the vast majority of computer users want ease and reliability. Virtually every piece of hardware works with Windows. And the vast bulk of hardware (cameras, phones, camcorders, mp3 players etc.) work with OSX. Can you say the same about Linux?

BTW I’m surprised you conflate issues so easily.

The new fear now is that MS will pull the plug of security updates for Win XP in 2y time as they’ve said. There will be millions of computers to at risk, computers which will not only jeopardise their users but also others, for many of these will become parts of botnets which can and will attack other sites and users.

 

[Tenofovir]

One question (and I’m sorry I started the whole OS debate): what’s going on with hacking cell phones and other devices?
There have been stories that other countries are going cashless, largely using cell phones for payments. Won’t that be the new frontier for bad guys?

Well there already are viruses for mobile phones. Once phones became little computers which could run custom code and not appliances (old style phones), malware could be distributed which could take control of the phone and install itself in regions which were off limits to ordinary programs. It’s the same as with the browsers.

In the beginning internet browsers - Netscape, Mosaic and Opera - only rendered images and text. They allowed for very little interactivity. Now that browsers can install computer software and can run complicated in-browser software, malware makers are able to use browsers as attack vectors and so compromise the host operating system. The same with cell phones. Your early appliance phone was locked down and one could not change any of its software, it allowed you to send emails/SMS and make voice calls plus browse the internet or play games. Now phones allow you to do whole operating system updates and install utility programs with escalated privileges. That facilitates malware. Sadly most people don’t need these “smart” phone features, and yet they’re present on more and more phones and so more people are becoming infected and infecting others.

As for cashless societies, we already have that. You probably get paid in electronic funds which are deposited in your bank account. Few people get paid in cash. Fewer people get paid in gold. A hacker could in theory delete the money off your account and then delete all backups which show that you were ever paid.

I hear ATMS in Japan will use hand recognition with date of birth and PIN code in some banks. Wonder how that will pan out.

 

[Kaninchen]

Cool, ad hominem attacks.

Oddly, the fact that it was an accurate observation rather than an ‘ad hominem’ (a diversion of an argument) was borne out by the next paragraph of your response:

I have yet to find a boxed Linux distro, a boxed DVD/photo editing app and a camera/hardware which guarantees that it works with Linux. Perhaps I shop at the wrong stores.

Quite the Linux expert, obviously.

Perhaps the bundled versions of Paint Shop Pro/Photoshop Elements/PS Lite come in Linux flavours too…?

It was me who pointed out that the lack of a ‘Photoshop’ was a problem (one of the reasons so many of us dual-boot)…

And no-one says it’s not possible with Linux, but it’s difficult, and the vast majority of computer users want ease and reliability. Virtually every piece of hardware works with Windows. And the vast bulk of hardware (cameras, phones, camcorders, mp3 players etc.) work with OSX. Can you say the same about Linux?

Well, the thing is, that potential users can try Linux distros out for themselves at no cost - don’t have to buy expensive operating systems or overpriced - if very tastefully designed - kit. They can dual-boot their machines and not lose their beloved Windows, they can bring old computers back to fully-functioning life, they can try all sorts of stuff. If they can’t use it, if they find difficulties, if they’re unable to find what they need, they’ve lost nothing.

BTW I’m surprised you conflate issues so easily.

Do explain - unless, of course, you’re referring to my response to another poster who had talked about XP, in which case don’t bother.

 

[Nine_Two]

You have to give a trojan admin level access for it to hurt you, no password, no damage, whereas viruses don’t need permission, they just manage it.

Only partially true. You may have to give the trojan the right level of access, do you think that anyone actually purposefully did that? Trojans are designed to trick you into giving them access, just like their mythical namesake. If you’re careful neither will be an issue for you. If you aren’t, both could be - and the trojan is more likely to be malicious.

The only thing worse than a trojan is a virus with a trojan attached to it.

 

[wynnejj]

I’ve been strictly Linux for a couple of years and pretty happy. I’d watch the Linux Action Show every Sunday night at http;//jupiterbroadcasting.com . Excited about all the new directions in the various desktops: Gnome 3, Ubuntu Unity, KDE Plasma, Awesome, et al. But then the Linux Action Show suddenly became the Windows Action Show with the emergence of the Windows 8 preview … and I’m afraid I’m missing all the action!

Windows Action Show

 

[Kaninchen]

But then the Linux Action Show suddenly became the Windows Action Show with the emergence of the Windows 8 preview … and I’m afraid I’m missing all the action!

Windows Action Show

The flatness is awesome.

 

[wynnejj]

The flatness is awesome.

I don’t know. Can’t you just smell the new polish?

 

[Nine_Two]

Windows 8 disgusts me. A grab by Microsoft at a market it holds no hope in.

Stick with Laptops and Desktops. Touch screens aren’t going to be the big thing for a while.

 

[wynnejj]

Windows 8 disgusts me. A grab by Microsoft at a market it holds no hope in.

Stick with Laptops and Desktops. Touch screens aren’t going to be the big thing for a while.

In the Linux world, many are disgusted with Gnome 3 and Ubuntu Unity new directions for touch screens. For the desktop / laptop communities, these new paradigms are unpopular.

 

[Nine_Two]

In the Linux world, many are disgusted with Gnome 3 and Ubuntu Unity new directions for touch screens. For the desktop / laptop communities, these new paradigms are unpopular.

Anything with a touchscreen is just a toy, and not a serious computer.

 

[Tenofovir]

Anything with a touchscreen is just a toy, and not a serious computer.

Touchscreens on non-tablet computers are a joke. One gets gorilla arm after a short while from using a touch screen. You have to sit with your shoulder, elbow and wrist extended and that causes fatigue. It’s a tablet/cell phone feature which is being forced on users for no apparent reason except for marketing purposes.

 

[Tenofovir]

Oddly, the fact that it was an accurate observation rather than an ‘ad hominem’ (a diversion of an argument) was borne out by the next paragraph of your response:

No it’s an ad hominem OR you’re missing the point but you’re too intelligent for that.
I also don’t see how you can compare me, someone you don’t know ANYTHING about to a computer salesman who tells you outright falsehoods and believes those falsehoods. I don’t think I’ve said anything false in this thread. I’ve corrected my original point that this Mac trojan attack is a drive by attack and may not require user (name removed by moderator)ut to infect the machine.

Quite the Linux expert, obviously.

And the point of using a computer is NOT TO BE AN EXPERT AT IT. The expert is the IT guy who fixes computers/software installations, or the programmer who makes money writing software or teaching computer classes. When I buy a car I am not expected to be an expert at it, i.e. not to be a mechanic. Same with computers. Point at hand is that 1. Linux is not good for average computer users who cannot easily buy or get software for it / or use out of box software / bundled software / drivers which come with cameras and cell phones. Take for example the unavailability of a Linux DVD player until the OSS community came up with one. 2. Linux is also not good for professionals who cannot use InDesign, Photoshop, Final Cut Pro, Publisher, Office and numerous other professional packages which come with all the right industry standards and compatibilities for plugins etc. 3. Ultimately Linux, like OSX can be compromised.

BTW do stores in the UK and Italy sell PC with Linux pre-installs? I think these are quite rare, eh?

It was me who pointed out that the lack of a ‘Photoshop’ was a problem (one of the reasons so many of us dual-boot)…

Issue 2, and one for pro users.

Well, the thing is, that potential users can try Linux distros out for themselves at no cost - don’t have to buy expensive operating systems or overpriced - if very tastefully designed - kit. They can dual-boot their machines and not lose their beloved Windows, they can bring old computers back to fully-functioning life, they can try all sorts of stuff. If they can’t use it, if they find difficulties, if they’re unable to find what they need, they’ve lost nothing.

Dual booting can be problematic. It also requires one to be an advanced user. It’s also one more step where some form of corruption can occur. When time is money or time is limited or one is simply not very good at computers as the vast majority of people are that is not an option. Appliance computers are best for most people, Apple is leading that and Windows is not too far behind, at least with Windows 7 which requires less maintenance than pre Vista versions of Windows.

Do explain - unless, of course, you’re referring to my response to another poster who had talked about XP, in which case don’t bother.

It’s possible to do much on Linux but you have to be an expert, it’s not impossible per se. But that’s the point, I never said it was impossible, I only said that ordinary users don’t need the extra difficulties when they can get an elegant boxed solution from Mac or a slighly less elegant but one of greater compatibility from PC makers/Windows. There is also bundled support with Windows/Apple computer. In terms of Linux versions one has to usually pay extra for support as the OS is free. Obviously there is free user support but the same goes for Windows and Mac, and with a greater user bases of non-professional IT users one is bound to get better application support and OS support from fellow Windows/Mac users. As in finding advanced Windows + Photoshop users or advanced Mac and Final Cut Pro users.

It’s difficult for advanced computer users to put themselves in the shoes of ordinary computer users hence this talk of Linux for Luddites. But Shuttleworth would be Bill Gates or Steve Jobs if this was really the case.

 

[wynnejj]

Sheeesh! This Luddite is going back to his Linux world, where they’re still fight a different war… Word War Vi.

Word War Vi - Do you know where your editor is now?

I guess Word War OS has much of the same elements of gameplay…
It’s a ridiculous game… But someone has got to play it!

 

[curlycool89]

Most people probably missed this because of the technical complexity, but this isn’t actually a Mac problem.

It’s actually a problem with the Mac version of the Java Virtual Machine (which has largely been deprecated in terms of system access at this point). Apple released a fix for it this past week and also released an update that should remove the most common variants.

Java has been bloatware for a long time coming, and it’s probably time for web developers to start moving away from it anyways. The day Java and Flash die preferably horrible deaths will be good days for the internet.

 

[Nine_Two]

Most people probably missed this because of the technical complexity, but this isn’t actually a Mac problem.

It’s actually a problem with the Mac version of the Java Virtual Machine (which has largely been deprecated in terms of system access at this point). Apple released a fix for it this past week and also released an update that should remove the most common variants.

Java has been bloatware for a long time coming, and it’s probably time for web developers to start moving away from it anyways. The day Java and Flash die preferably horrible deaths will be good days for the internet.

As long as the ability exists to copy files from a server to a client computer, the ability to transmit malware from websites will continue unimpeded.

I think the solution Apple came up with is the only one with a chance of working, but for me it is far too draconian.

The only good solution is that people get educated so they can minimuze the threat.

 

[curlycool89]

As long as the ability exists to copy files from a server to a client computer, the ability to transmit malware from websites will continue unimpeded.

I think the solution Apple came up with is the only one with a chance of working, but for me it is far too draconian.

The only good solution is that people get educated so they can minimuze the threat.

Well, there are a few opinions on that idea, including the open source model and the “walled garden” model. There’s also the anything goes model.

Apple’s iOS system follows the so-called “walled garden” model. There’s an official App Store and you can only download stuff from that store, and the stuff has been tested to make sure they’re not virus’, and apps are not able to read data from each other: they’re all walled off (that apparently something that jailbreaking disables). Critics call it draconian, proponents call it safer.

Then there’s the open source model. Anyone can see the code so many people have checked for bugs, holes, backdoors, and that the program does what it says it does. The Darwin underbelly of Mac OS X is open source. The advantages are given above. The disadvantages are that open source, at the moment, associates closely with socialism as a political ideology (rightly or wrongly), so some people won’t touch it. Also, since anyone can take the code and compile it (usually, if there’s too many restrictions on it someone could just steal it instead Robin Hood style), it’s harder to profit from because some guy can show up on the internet and distribute it for free (considering how big the illegal distribution of software is…)

The anything goes model is what Android (and Windows and Mac and Linux and basically any full OS) follows, and you can basically describe it as anarcho-capitalism incarnate. It emphasizes that it’s up to the end user to check anything they do and sometimes you brick your computer and it’s too bad for you. It does emphasize the importance of self-responsibility, which is not a bad thing (duh, this is a Catholic site, we’re big on self-responsibility). Unfortunately, people are largely idiots when it comes to technology and have no intent on educating themselves, so the 1% of people who know anything about computers spend all their time trying to fix the problems the other 98.9% get into, while the remaining 0.1% exploit the stupidity of the 98.9%.

 

[Nine_Two]

Well, there are a few opinions on that idea, including the open source model and the “walled garden” model. There’s also the anything goes model.

Apple’s iOS system follows the so-called “walled garden” model. There’s an official App Store and you can only download stuff from that store, and the stuff has been tested to make sure they’re not virus’, and apps are not able to read data from each other: they’re all walled off (that apparently something that jailbreaking disables). Critics call it draconian, proponents call it safer.

Then there’s the open source model. Anyone can see the code so many people have checked for bugs, holes, backdoors, and that the program does what it says it does. The Darwin underbelly of Mac OS X is open source. The advantages are given above. The disadvantages are that open source, at the moment, associates closely with socialism as a political ideology (rightly or wrongly), so some people won’t touch it. Also, since anyone can take the code and compile it (usually, if there’s too many restrictions on it someone could just steal it instead Robin Hood style), it’s harder to profit from because some guy can show up on the internet and distribute it for free (considering how big the illegal distribution of software is…)

The anything goes model is what Android (and Windows and Mac and Linux and basically any full OS) follows, and you can basically describe it as anarcho-capitalism incarnate. It emphasizes that it’s up to the end user to check anything they do and sometimes you brick your computer and it’s too bad for you. It does emphasize the importance of self-responsibility, which is not a bad thing (duh, this is a Catholic site, we’re big on self-responsibility). Unfortunately, people are largely idiots when it comes to technology and have no intent on educating themselves, so the 1% of people who know anything about computers spend all their time trying to fix the problems the other 98.9% get into, while the remaining 0.1% exploit the stupidity of the 98.9%.

The problem with open source is that it still requires education. While people can go through the code, most won’t. Its more trustworthy to get products from an established company, as they won’t include malware, even if they are closed source.

 

[curlycool89]

The problem with open source is that it still requires education. While people can go through the code, most won’t. Its more trustworthy to get products from an established company, as they won’t include malware, even if they are closed source.

All true.