May 16

Yeah we Macs have Malware. But don’t talk to strangers

Information Comments Off on Yeah we Macs have Malware. But don’t talk to strangers

AppleInsider is reporting a possible Malware Threat to users of Macs. The threat is in the form of a fake piece of software that is supposed to clean up your computer and defend your computer against Viruses. Its fake name is also the name of a real program – its called MacDefender. If you visit a site and it automatically opens up an installer for MacDefender, simply quit the program. Do not enter your password or any sort of install info. Below is the original link and excerpt from the Appleinsider article. In other words “Don’t talk to Strangers” If you don’t know the program don’t give the password. Simple pimple.

http://bit.ly/jHKYDs

New malware attacks Mac OS X users through Apple Safari browser

By Katie Marsal

Published: 10:00 AM EST

Newly discovered malicious software dubbed “MACDefender” takes aim at users of the Mac OS X operating system by automatically downloading a file through JavaScript. But users must also agree to install the software, leaving the potential threat limited.

The new MACDefender malware was first noted on Saturday”> by users of the Apple Support Communities, and was highlighted on Monday by antivirus company Intego. If the right settings are enabled in Apple’s Safari browser, MACDefender can be downloaded to a system after a user clicks a link while searching the Internet.

“When a user clicks a link after performing a search on a search engine such as Google, this takes them to a web site whose page contains JavaScript that automatically downloads a file,” Intego said. “In this case, the file downloaded is a compressed ZIP archive, which, if a specific option in a web browser is checked (Open ‘safe’ files after downloading in Safari, for example), will open.”

However, users must still agree to install the malware after it downloads. After the ZIP file is extracted, users are presented with the “MACDefender Setup Installer,” at which point they must agree to continue and provide an administrator password.

Because of the fact that users must agree to install the software and provide a password, Intego categorized the threat with MACDefender as “low.”

Users on Apple’s support forums advise killing active processes from the application using the Mac OS X Activity Monitor. MACDefender can then be deleted from the Applications folder by dragging it into the trash.

The malware is not to be confused with MacDefender, the maker of geocaching software including GCStatistic and DTmatrix. The company noted on its site it is not affiliated with the malware.

Malware spreads through search engines like Google via a method known as “SEO poisoning.” The sites are designed to game search engine algorithms and show up when users search for certain topics.