iPhone app iPad app Android phone app Android tablet app More

Gerry Smith
GET UPDATES FROM Gerry:

Apple Vows To Fight Flashback Virus, Mac Users Receive Wake-Up Call

Posted: 04/11/2012 3:23 pm

Apple Flashback Malware

Apple said Tuesday it is developing software to detect and remove a widespread computer virus that has infected an estimated 600,000 Macs and reminded Mac owners they are not immune to malware.

Last week, the virus -- dubbed "Flashback" or "Flashfake" -- spread quickly around the world, downloading itself onto Macs and allowing hackers to gain remote access to victims' computers.

Earlier versions of the malware stemmed from a pop-up window that tricked users into installing a fake version of Adobe Flash. Newer versions exploited a security flaw in Java software that infected Macs by redirecting users to a bogus site. Once hackers gained control of the computers, they could spy on Mac users and steal their personal and banking data.

Security experts have called Flashback the largest and most sophisticated attack on Macs to date. And many have criticized Apple for not patching the Java security flaw, which had been publicly identified in February.

Apple also said Tuesday that it was working with Internet service providers worldwide to disable the computer servers hosted by the malware's creators.

Security firms Kaspersky Labs and Doctor Web have released tools so Mac users can check to see if their computers are infected by Flashback. The security firm F-Secure has written software to remove the malware.

Experts say the Flashback virus should serve as a wake-up call to Mac users whose computers are often considered more secure than PCs running Microsoft Windows. A 2009 survey by the antivirus firm ESET found that more than half of Americans considered PCs to be "very" or "extremely" vulnerable to cyberattacks, but only 20 percent felt the same way about Macs.

Some experts say Mac users have appeared immune to cybercrime because hackers have spent more time devising ways to hack Windows operating systems, which still run on the vast majority of PCs. As Macs grow in market share, however, they will likely receive more attention from hackers, and Mac owners should be more vigilant about keeping their computers secure by installing antivirus software and keeping their software updated, according to Alan Woodward, a visiting professor at the University of Surrey's department of computing.

"Those using Mac OS have, perhaps, been lulled into a false sense of security," Woodward wrote in a post on a blog hosted by the security firm Sophos.

He added: "Mac OS users may be 'safer' than Windows users, simply because they have fewer attacks focused on their systems, but they are not more 'secure.'"

The Flashback virus is not the first time Macs have been targeted by hackers. Last May, between 60,000 and 125,000 Mac users were infected with the so-called Mac Defender malware, a phishing scam that tried to trick users into revealing their credit card information.

And two weeks ago, security researchers found malware on older versions of Microsoft Office for Mac that was distributed by rogue emails appearing to target Tibetan activist organizations. The infected Microsoft Word documents allowed hackers to take control of Macs in order to download, upload and delete files, steal passwords and credit card numbers, or send spam.

Researchers at Intego, a security firm for Apple products, wrote that "while, in the past, we did not see this type of attack targeting Macs, it is clear that the game has changed, and that we are entering a new period of Mac malware."

FOLLOW TECH

From our partners


Apple said Tuesday it is developing software to detect and remove a widespread computer virus that has infected an estimated 600,000 Macs and reminded Mac owners they are not immune to malware. Las...
Apple said Tuesday it is developing software to detect and remove a widespread computer virus that has infected an estimated 600,000 Macs and reminded Mac owners they are not immune to malware. Las...
 
 
  • Comments
  • 230
  • Pending Comments
  • 0
  • View FAQ
Post Comment Preview Comment
To reply to a Comment: Click "Reply" at the bottom of the comment; after being approved your comment will appear directly underneath the comment you replied to.
View All
Favorites
Recency  | 
Popularity
Page: 1 2 3 4  Next ›  Last »  (4 total)
04:21 PM on 05/31/2012
2 issues with your article:

1. A virus and a malware are two different types of infections. Viruses self initiate and are not a software. They replicate, and can cause hardware damager. Malware requires installation.. Those that got this, gave their admin password.. And Macs have ALWAYS had malwares. Oddly enough, over the past 5 years, they've dropped from around 5-10 a year to maybe 1.. Where were you 8 years ago when the OS saw nearly 10??? Do your research.

2. 600,000 users is around 1% of users... Is that a wake up call??
09:42 PM on 07/05/2012
It is not worth writing virus for 4% of computer users in the world hehe
08:38 AM on 04/16/2012
BREAKING: Indie rock band releases chickens in Apple store! Mayhem ensues. Tech industry cries fowl!

video footage:http://www.babysealclub.com
01:05 PM on 04/14/2012
Not immune to Malware and Viruses? Give it up Apple. your now as secured as windows. More and more people are buying your computers so more and more hackers are taking their eyes off of windows and looking that Mac OS X.
04:23 PM on 05/31/2012
Incorrect.. Less than 50-60 in the past decade vs. over 1 TRILLION on windows..

Its harder to write
You have to install with a password
Apple releases security removal tools generally within 3-4 days..

Its still not substantially, but completely inexplicably more secure than windows.. 1 word as of this summer that will nullify it and make it infection free FINALLY?

GATEKEEPER
photo
rpeterson2205
Half troll, half realist, all asshole.
09:03 AM on 04/14/2012
not much new to say here.
This user has chosen to opt out of the Badges program
01:34 AM on 04/14/2012
Frankly, this is just basic deductive reasoning. Macs aren't very widely used (at least until recently), and such hacks as this are made with the intent of profiting off of someone else's software vulnerabilities. If you're going to go to the effort to program malware to take advantage of an OS' vulnerabilities, you may as well work on something that a lot of people are using; it's presumably the same effort, but you'd be casting a wider net, so to speak. Thus more profits. There might be a few hackers just making malware for fun, but again, a popular platform provides the most ground for a test run.
05:46 PM on 04/13/2012
the future depends on computers now, what if someone hacked or destroyed the internet and you really had urgent messages to send, not to mention very important. So why dont we, create a data base that will track down hackers and trace were they come from and punishment will be for the first offence, the removal of 1 hand. Can cut something else off too if that dont work
photo
Smashbox
Never faking the funk
09:09 PM on 04/13/2012
well in a cyber world where the corporations of the world control everything, perhaps hackers are our last line of democratic defense against the global oligarchy
11:58 PM on 04/13/2012
AAA+ ! I'll be the first in line. I am so sick and tired of these low lifes.
05:20 PM on 04/13/2012
You people that think Macs are invincible are fools. Nothing hooked to the internet is invvulnerable. The only reason hackers haven't gone after Macs is that there are too few of them to bother with as the article states. I've said this for years, which is why I always laugh when an Apple commercial says thier computers are a defense against hackers. Get real morons, any program can be hacked, and will be. nuff said.
photo
Smashbox
Never faking the funk
09:11 PM on 04/13/2012
People love their illusions of safety don't they? Every single person in the world is one wrong move away from death every day of their lives. Learn to love it
dojinho
Governments lie. – Howard Zinn
11:38 PM on 04/13/2012
Wow, by the way you express yourself you sound like you could give us "morons" a lot of good lessons, but since you have a lot of criticism without a shred of arguments to back them up, I won't hold my breath!

Phishing has nothing to do with virus sensitivity and anyone can fall in that trap, whether you have a Mac, a PC running Microsoft or Linux. The so-called "experts" pontificating that Mac users need to wake up and start buying expensive and annoying virus protection just all happen to be virus software sellers! Maybe a little biased?
This user has chosen to opt out of the Badges program
01:06 AM on 04/14/2012
You don't have basis for that argument, either. My anti-virus software is free, by the way. But it is true; macs have until very recently made a poor target for any sort of malicious virus meant to steal important data, phishing scam or no, due to the relatively low number of macs. It's just simple math; you'd get more results for your time by targeting windows.
photo
HUFFPOST COMMUNITY MODERATOR
WasteNJ
(Welcome To Digital Blackwater)
09:47 AM on 04/13/2012
For anybody groping for an excuse, Apple has known about their Safari and Java vulnerabilities for YEARS. The CanSecWest hacking competition yearly shows how weak Safari is, it typically falls to hackers in less than a minute. The way the comp works, the hackers can take the money and give up their hacks to the manufacturer, or keep the hack and pass on the money. Hackers usually take the money, and Apple has had these hacks for years without acting to secure the holes in their browser.

From back in 2009:
http://www.zdnet.com/blog/security/pwn2own-2009-safarimacbook-falls-in-seconds/2917?tag=content;siu-container

From 2011:
http://www.pcmag.com/article2/0,2817,2381784,00.asp

Microsoft fixed their vulnerabilities as they usually do as they are identified, Apple didn't, as usual.
09:55 PM on 04/14/2012
Not due to issues with the software being hacked directly but with human stupidity...it's called PEBKAC (Problem Exists Between Keyboard And Chair). You can't cure or prevent stupid...but I can't let someone tout this as a weakness that really isn't one inherent to the software. Look .exe (executable files) don't exist for the Mac so while they tout a venerability of human curiosity and stupidity as a hack it's really just tricking the user to install the malware for the hacker...the hacker really doesn't do anything but right the script and use physiology to dupe the user. It's not nearly as bad as the hundreds of thousands of real hacks that happen all the time on non Mac's or what are commonly known as PC's. It should also be known that without that human intervention of physically going to the site and initiating the installation of the script the mac could not be hacked.
photo
HUFFPOST COMMUNITY MODERATOR
WasteNJ
(Welcome To Digital Blackwater)
08:56 AM on 04/16/2012
We call that a 215 error, i.e. "U" (21st letter), "E" (5th letter) or User Error. It's always the main factor, but so what, these are machines designed to be used by humans.
People can debate the inherent weaknesses of any OS, all have them and Can Sec West proves it. All the talk about it being Java's fault, etc, etc, is meaningless. The machine and OS must function in the currently popular environment, must use a web browser, etc. Apple chooses to manage that entire process of third party integration themselves, and therefore hold more blame than the developer would carry with a Windows based OS when it doesn't all work flawlessly.

The attack vector doesn't matter, once the bug is inside, that's all academic. The rubber meets the road in the response time and handing of the threat, which is my original point. Apple has mishandled that for years and it's catching up with them.
photo
HUFFPOST COMMUNITY MODERATOR
WasteNJ
(Welcome To Digital Blackwater)
09:42 AM on 04/13/2012
If you remember, last year when a similar bug hit Macs, Apple issued in internal memo to their tech shops telling staff NOT to identify the malware to Mac owners who brought their computers in for service. They were instructed to ignore the threat and not to provide a solution, as Apple didn't want the news to get out. Obviously, this is no way to run a service shop. (I know, I ran two)

http://www.dailytech.com/Apple+Orders+Technicians+to+Feign+Ignorance+About+Mac+Malware/article21693.htm

Now not only has a similar bug popped up again this year (months ago actually), but Apple is resorting to their old tactic of silencing the messenger, this time trying to shut down web domains that have identified the bug and provided info about it and the vulnerability. Dr. web is a good example. These outfits are an integral part of the PC world's virus detection network.

http://www.gizmodo.com.au/2012/04/apple-tries-to-shut-down-dr-macs-virus-monitoring-servers/

See part 2:vvv
01:32 AM on 04/13/2012
I woould not panic but as this can take advantage of a java security hole their is a potential for an infection. This site has info about it. If you are not comfortable in terminal mode use the Apple security updates as they become available.

How do I detect it?
http://reviews.cnet.com/8301-13727_7-57410096-263/how-to-remove-the-flashback-malware-from-os-x/

Detecting the malware is fairly easy, and requires you simply open the Terminal application in the /Applications/Utilities/ folder and run the following commands:

defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

defaults read /Applications/Safari.app/Contents/Info LSEnvironment

defaults read /Applications/Firefox.app/Contents/Info LSEnvironment

If the variable is not present, then these three Terminal commands will output that the default pair "does not exist,"

In addition to the above commands, you can check for the presence of invisible .so files that past variants of the malware create in the Shared user directory by running the following command in the Terminal:

ls -la ~/../Shared/.*.so

After running this command, if you see an output of "no such file or directory" then you do not have these files in your user shared directory; however if they are present then you will see them listed.
01:29 AM on 04/13/2012
"The Flashback virus is not the first time Macs have been targeted by hackers. Last May, between 60,000 and 125,000 Mac users were infected"

Welcome to 2006 ~ http://voices.yahoo.com/first-ever-mac-osx-virus-466005.html

Apple claims on it's website that it is immune to PC viruses, and yet Java is platform independent, and was originally made for a PC. The irony here is that Mac hardware is the same as PC hardware now...
http://www.apple.com/why-mac/better-os/#viruses
photo
HUFFPOST COMMUNITY MODERATOR
WasteNJ
(Welcome To Digital Blackwater)
09:44 AM on 04/13/2012
Yes, and last year Apple tried to silence the messenger by telling their tech shops not to confirm or deny the bug, and not to fix infected Macs or tell the users about the problem.

http://www.dailytech.com/Apple+Orders+Technicians+to+Feign+Ignorance+About+Mac+Malware/article21693.htm

Your post sounds like one of mine! Fanned.
This user has chosen to opt out of the Badges program
11:30 PM on 04/12/2012
I will never believe this story. There are way too many layers when I opened it in Adobe Illustrator. I doubt this story will pass the standards of Sheriff Joe Arpioa and his cold posses.

This article is obviously a fake and forged. Please ignore it and move on. Mac is invincible.
09:06 PM on 04/13/2012
Oh, naive one...
This user has chosen to opt out of the Badges program
01:12 AM on 04/14/2012
Illustrator is an image editing program. It does nothing to determine the validity of a story. And while there is freedom of the press, libel and slander don't qualify as protected speech. Apple could sue Huffpost if this story was fake. Big time. It would be suicidal, from a business perspective, to forge a story like this.
photo
HUFFPOST SUPER USER
grimcity
Louisiana swamp troll.
06:47 PM on 04/12/2012
People, you are more than your operating system.

Including you Unix and Linux cats that recompile kernels for fun.
01:37 AM on 04/13/2012
Some of us design and recompile kernels for work as well. You can't possibly believe Google uses a stock Linux kernel for Android...

I'll be sure to keep your post in mind when my boss is bitching at me as to why the company's private cloud/VNC server can't have less overhead per user.
photo
HUFFPOST SUPER USER
grimcity
Louisiana swamp troll.
02:57 PM on 04/15/2012
Hey, I'm not hating Bro. I run everything from Win boxes to mainframes. Users getting into OS fights are just really, really 90's.
05:34 PM on 04/12/2012
Did any of you ever wonder why an apple machine is more expensive than a windows machine?
apple computers may not be invincible but they are way more secure they a windows computer. haha i was on windows 7 for about 10 minutes without a antivirus and i went to filestube and within about 5 seconds my computer information came up saying i was infected with over 10 virus's then it went up to about 50 virus's. i have been a happy apple customer for years and you wanna know what the funny part is? that this is the first time ive EVER heard of a potentially harmful virus/trojan on a mac and at least apple is doing something about it
photo
disporting
Weapons not food, not homes, not shoes
05:58 PM on 04/12/2012
maybe you shouldn't go to those sites? And that is likely to be an ad that shows you are infected, since as you stated, there was no anti-virus software on the computer to detect these things, so the message was likely to be an ad and clicking on it installed a virus/spyware/malware.
07:32 PM on 04/12/2012
Did you read the article? Have not they said that hackers did not care for MACs because there is not enough to infect and get profit out of it. Mac is now only 5% in worldwide market share and 10 years back i don't think it's more than 1%. Given that why on earth a hacker try to invest his time and money to infect that low amount of machines. I respect Apple for fooling it's users in believing that MAC is more "secure" whereas the reality is nobody cared about it. "Secured" means when it was tried to be broken but could not be. "Secured" does not mean nobody even tried to breakin. It's like if you have a boat with a hole in it but you always kept that boat on the ground and you thought your boat is okay.
05:40 PM on 04/13/2012
I like the "My boat is unsinkable as long as it is out of the water." analogy.
photo
HUFFPOST SUPER USER
theveggiedude
my body is a temple, not a living graveyard
12:50 PM on 04/12/2012
If they are to be believed, one percent of Macs are affected.

That's not enough to scare me.
photo
HUFFPOST SUPER USER
twystd69
01:59 PM on 04/12/2012
Yeah, well, one percent can very quickly become 50 percent and if you dont have an anti virus ware for your computer, you will be in big trouble. This is just the first and your invincibility will be gone. Now that companies are using tablets in schools you will see hackers, trojans, malware explode and you might be one of the ones having your identity stolen. I feel safer with my windows and my antivirus security suite than I would surfing blind on an unprotected mac.
07:28 PM on 04/12/2012
Well you do not need anti virus for this attack. It is obvious you have total lack of knowledge of how this attack occurs. And a general lack of knowledge about OS X.

This attack requires your approval and action. Now in the local Mac users group which has a monthly attendance of nearly 100, only one person said they got this virus and recognized they had done wrong.
This user has chosen to opt out of the Badges program
photo
02:22 PM on 04/12/2012
Less than 1% of the US population tested positive for HIV. Keep having unprotected sex. That's the smart thing to do. :)
02:49 PM on 04/12/2012
1% is not very much but when you put it that way might as well be 99%.