Live data from Hacker News

Flashback trojan reportedly controls half a million Macs and counting

arstechnica.com

41–50 of 125 posts

Re: Flashback trojan reportedly controls half a million Macs and counting

#41
post #9

Earlier quoted context omitted.

Didn't Apple used to claim that Macs didn't get viruses? I can't remember. (This would be at least several years ago, when Mac malware was still fully theoretical.) It's possible they never stated it directly, and the phrase was spread by fans. To be fair, their slogan is currently "Macs don't get PC viruses" [1]. Which is true. Although, devilishly close enough to blur the two in somebody's mind. [1] http://www.appl…

Whoa, no kidding. The majority of people are not going to stop on those two letters and consciously differentiate "virus" from "PC virus."

"A Mac isn’t susceptible to the thousands of viruses plaguing Windows-based computers."

Pretty clear.

Re: Flashback trojan reportedly controls half a million Macs and counting

#42
post #9

As someone who used to sell Mac computers, I used to get asked the question "Is it true macs never get viruses?", to which I replied "No that's not true." (It was just an apple reseller store afterall so I was never compelled to bend the facts.) I'd try to explain the caveats a bit: a smaller market share and the unix based operating system requiring more permissions, yada yada, being "prohibitive" to an attack but s…

Didn't Apple used to claim that Macs didn't get viruses? I can't remember. (This would be at least several years ago, when Mac malware was still fully theoretical.) It's possible they never stated it directly, and the phrase was spread by fans. To be fair, their slogan is currently "Macs don't get PC viruses" [1]. Which is true. Although, devilishly close enough to blur the two in somebody's mind. [1] http://www.appl…

Given that macs are PCs, being personal computers, it's not true that macs don't get PC viruses.

Re: Flashback trojan reportedly controls half a million Macs and counting

#43
I have XCode installed, so I guess I'm safe from this. Do you have any standard advice for how a regular MacOS user should configure their system to be safe? I don't even have anti-virus software installed like I do on my Windows machine, I assumed the Mac OS took care of that (but not if 1/2 million Macs are infected with this thing =/). I do keep the built-in firewall turned on. Is there a website or something that I can go to that will teach me what steps I should take on my MacBook Pro to keep it clean?

Re: Flashback trojan reportedly controls half a million Macs and counting

#44

As someone who used to sell Mac computers, I used to get asked the question "Is it true macs never get viruses?", to which I replied "No that's not true." (It was just an apple reseller store afterall so I was never compelled to bend the facts.) I'd try to explain the caveats a bit: a smaller market share and the unix based operating system requiring more permissions, yada yada, being "prohibitive" to an attack but s…

Yes, it is correct that Macs can get viruses. Where people get upset is when you generalize this to say that because >1 virus exists, OSX presents no significant advantage over Windows. Viruses are not a fact of life for Mac users. Talk to anyone who uses or services Macs; you'll be hard-pressed to find anyone who's even seen an OSX virus. Whereas for Windows power-users, cleaning viruses for friends/parents is pract…

OSX is still dramatically safer in terms of your actual risk of a random remote attack.

It certainly was in the WinXP years due to a far superior security model, but I'm curious if this is still the case with modern windows.

Re: Flashback trojan reportedly controls half a million Macs and counting

#45
post #2

Whoa, it aborts infection if you have XCode installed? Is this just to prevent itself from infecting someone's computer that might be able to study it?

According to some malware researchers I've talked to it is not unusual to find that kind of hardcoded exceptions. I thought that it was to avoid infecting "clever" users, but they told me sometimes malware coders bundle those to avoid infecting their own computers (or their clients') without being to obvious about it. It's apparently not unusual to also find exceptions for IP blocks of whole countries or ISPs.

Re: Flashback trojan reportedly controls half a million Macs and counting

#46
post #22

Earlier quoted context omitted.

My guess is it will be a 3 ghz quad-core android phone that docks on your monitor & wirelessly connects to everything else.

I hope so. I really really hope so. That's the direction I see computing going in the future, despite all the haters that say a tablet/phone will never replace the "desktop"

You'll need to kickstart Moore's Law again.

Re: Flashback trojan reportedly controls half a million Macs and counting

#47

Earlier quoted context omitted.

Yes, it is correct that Macs can get viruses. Where people get upset is when you generalize this to say that because >1 virus exists, OSX presents no significant advantage over Windows. Viruses are not a fact of life for Mac users. Talk to anyone who uses or services Macs; you'll be hard-pressed to find anyone who's even seen an OSX virus. Whereas for Windows power-users, cleaning viruses for friends/parents is pract…

Viruses are not a fact of life for Mac users. Neither are trojans, and that is exactly why this trojan has manifested so successfully. Windows users are mostly hardened to the basic threats of the internet (don't open a random exe etc), and are cognizant of the reality that malicious software does target them. Non-technical Mac users have been lulled into a false sense of security that will eventually make them a mor…

I've done ~15 Windows reinstalls in the last few years, and every single one of them was malware masquerading as anti-virus software. OSX's reputation may make Mac users feel invincible, but Windows users' knowledge of their vulnerability opens them to pretty effective scare tactics.

In fact, it hit my house twice, and I'm not exactly incompetent: Win7, Security Essentials, kept on top of Windows Update, no admin privileges for little brother or mom, updated Firefox, etc. The last time, it turned out we were behind on Java updates - it popped up in the systray 5 or 6 times a day for a few months and the few times my dad tried to allow the update, it failed. I didn't know about that until I was in the room while my brother was using the machine and I saw a dialog that looked an awful lot like Windows reminding you to install AV but not quite right. No way anyone else would have noticed that the background gradient was just a bit off. Did a scan... MSE was showing me 20 different Java exploits and "Anti"virus 2012 wouldn't let me open Firefox again outside of safe mode. Not something my parents would be able to deal with when I'm not there; they would have had to pay somebody. Its replacement will be a Mac; they like OSX better anyway.

I worked for a small-business IT firm for 3 summers and have never seen or heard of OSX malware except from the blogosphere/HN/media. We took our clients' security pretty seriously - corporate domains, enforced Automatic Updates, no idiots with local admin, corporate endpoint antivirus, antivirus in the spam filter, Sonicwalls, Firefox wherever possible, etc. Still, we got virus calls pretty frequently. I would usually babysit the reinstalls at a reduced rate, but when I wasn't interning, businesses were shelling out $150/hour for that. To be fair, most were XP, but there were a few virus calls for Win7.

I don't have statistics, but if you're going to claim OSX has fallen as far as Windows in terms of infection rate, I think the burden is on you to show some data. Again, just as many family friends running OSX as Windows; I've had Macs die (my MBP's motherboard gave out right after 4 years), I've had Macs run out of disk space, I've had the PowerPC/Intel switch lose my family a lot of money because perfectly good ~2006 machines can't run a modern OS or Flash/Firefox/iTunes, but I've never seen malware for OSX.

Re: Flashback trojan reportedly controls half a million Macs and counting

#48

Earlier quoted context omitted.

Viruses are not a fact of life for Mac users. Neither are trojans, and that is exactly why this trojan has manifested so successfully. Windows users are mostly hardened to the basic threats of the internet (don't open a random exe etc), and are cognizant of the reality that malicious software does target them. Non-technical Mac users have been lulled into a false sense of security that will eventually make them a mor…

I've done ~15 Windows reinstalls in the last few years, and every single one of them was malware masquerading as anti-virus software. OSX's reputation may make Mac users feel invincible, but Windows users' knowledge of their vulnerability opens them to pretty effective scare tactics. In fact, it hit my house twice, and I'm not exactly incompetent: Win7, Security Essentials, kept on top of Windows Update, no admin pri…

> every single single one of them was malware masquerading as anti-virus software.

I'm curious what you think about Malwarebytes Anti-Malware - this was the only product that was able to clean my father's Win7 PC for Antivirus 2012 (by booting into safe mode with networking and running the cleaner). Paid for the Pro version. A little difficult to get working with the Symantec virus scanner but worth every penny for not having to make the trip to my parents to clean malware since...

Re: Flashback trojan reportedly controls half a million Macs and counting

#49
post #43

I have XCode installed, so I guess I'm safe from this. Do you have any standard advice for how a regular MacOS user should configure their system to be safe? I don't even have anti-virus software installed like I do on my Windows machine, I assumed the Mac OS took care of that (but not if 1/2 million Macs are infected with this thing =/). I do keep the built-in firewall turned on. Is there a website or something that…

I personally run chrome and block all plugins by default, and enable them when I think I have a good idea what the plugin is doing. You can then set specific sites that may always run plugins, so it's not overly annoying when on a few flash-heavy sotes. Presumably Safari has a similar option.

Unfortunately Chrome only allows you to "run all plug-ins" on a site or "block all plug-ins", so there's still a possibility of enabling Java when you meant to enable flash to view a video. However, it's probably a good first step against attacks like these.

I also run under a regular user account without direct sudo access, so any action that modifies system files should request an admin password. Jeff Atwood (codinghorror.com) had a good post about this for Windows: http://www.codinghorror.com/blog/2007/06/the-windows-securit...

Re: Flashback trojan reportedly controls half a million Macs and counting

#50
post #42
post #9

Earlier quoted context omitted.

Didn't Apple used to claim that Macs didn't get viruses? I can't remember. (This would be at least several years ago, when Mac malware was still fully theoretical.) It's possible they never stated it directly, and the phrase was spread by fans. To be fair, their slogan is currently "Macs don't get PC viruses" [1]. Which is true. Although, devilishly close enough to blur the two in somebody's mind. [1] http://www.appl…

Given that macs are PCs, being personal computers, it's not true that macs don't get PC viruses.

[deleted]
Post reply on HN