Home / News / Desktop PC News / Macs Targeted In Malware Attack

Macs Targeted In Malware Attack

David Gilbert


Macs Targeted By Fake Antivirus Software

A fake antivirus program which downloads itself onto your Mac, is a very rare virus specifically aimed at Apple’s computers.

Software security firm, Intego, has discovered a fake antivirus program called variously MacDefender, MacSecurity and MacProtector, which targets Mac users via SEO poisoning attacks. When a user clicks on a link at the top of search results they are taken to what looks like a Mac OS X screen (previously it looked like a Windows screen) where an animated image looks as if it is scanning your computer and reports than indeed your Mac is infected. Javascript on the page at this stage automatically downloads a .zip file and should you have certain web browser options activated may uncompress the file automatically. The installer is launched and should you press install and put in your password, the software will be installed. A program called MAC Defender then launches and adds a menu item to the menubar. The software also adds itself to the Login items so that it will launch every time you log in or restart your computer.

The application is very well designed, and looks professional. There are a number of different screens, and the grammar and spelling are correct, the buttons are attractive, and the overall look and feel of the program give it a professional look. MAC Defender also opens web pages for pornographic web sites in the user’s web browser every few minutes. This is most likely to make users think that they are infected by a virus, and that paying for MAC Defender will relieve them of the problem. Having ‘scanned’ your computer MAC Defender will bring you to a register page where you can sign up for a 1-year, 2-year or lifetime license by entering your credit card details. Of course the software itself is completely useless and the virus results are bogus.

Apple has confirmed it has launched an investigation into the fake software and has issued its Apple Care team with instructions regarding what to do if a customer calls with the problem. An Apple Care representative has said that calls to the customer care centre were up by four to five times the normal volume and nearly all calls were dealing with MacDefender and its aliases.

In the past sites like these, which commonly deliver Windows malware, only delivered Windows .exe files. The fact we are now seeing this site Mac rogue software is very rare indeed and its professional look, could make it easily mistaken for a real application. Of course not installing something which automatically downloads from the Internet is the easiest way of protecting yourself against such software. You can also switch off the automatic opening option you may have activated in your browser. For more information click the source link below.

Source: Intego

comments powered by Disqus