Live data from Hacker News

MacKeeper 0-day flaw more than 20M users affected

thehacktimes.com

11–20 of 54 posts

Re: MacKeeper 0-day flaw more than 20M users affected

#12
The person who found the 0-day set up a website that exploits the flaw by uninstalling MacKeeper.

Mr. Thomas released a proof-of-concept (POC) demonstrating how visiting a specially crafted webpage in Safari causes the affected system to execute arbitrary commands – in this case, to uninstall MacKeeper.

Source: http://securemac.com/MacKeeper_Security_Advisory_Revised.php

Re: MacKeeper 0-day flaw more than 20M users affected

#15

The person who found the 0-day set up a website that exploits the flaw by uninstalling MacKeeper. Mr. Thomas released a proof-of-concept (POC) demonstrating how visiting a specially crafted webpage in Safari causes the affected system to execute arbitrary commands – in this case, to uninstall MacKeeper. Source: http://securemac.com/MacKeeper_Security_Advisory_Revised.php

Proof of concept and solution, sounds like.

Re: MacKeeper 0-day flaw more than 20M users affected

#16
Not sure if anyone knowingly installs MacKeeper but I accidentally accepted the download for MacKeeper when I was trying to install a Camera app. Big mistake and I tried to stop the installation.

MacKeeper is a nasty piece of malware. I couldn't quit the program, it would immediately start back and putting it in the trash did nothing. Ended up having to boot into safe mode and remove.

Well as soon as I got it off my computer in Safe mode and restarted I get a prohibited sign. Mac will not boot. Ended up having to reinstall OS X. Thankfully you are able to reinstall and keep your files. Now I stay up to date on my backups!

I don't see why apple doesn't ban them. Obviously they are shady.

Re: MacKeeper 0-day flaw more than 20M users affected

#20
post #16

Not sure if anyone knowingly installs MacKeeper but I accidentally accepted the download for MacKeeper when I was trying to install a Camera app. Big mistake and I tried to stop the installation. MacKeeper is a nasty piece of malware. I couldn't quit the program, it would immediately start back and putting it in the trash did nothing. Ended up having to boot into safe mode and remove. Well as soon as I got it off my…

I once saw a coworker accidentially installing it and it surely is a nasty piece of malware. The problem is that one can never be quite sure whether every piece of the software was removed, which is why we ended up just reinstalling OS X and avoid guessing.

Since then, a few of my friends, who aren't into tech, almost installed MacKeeper. They all had a long history of using Windows and felt that installing some Anti-Virus, Anti-Malware junk was the most natural thing. For normal users it's really hard to distinguish between legitimate applications/websites and shady stuff.

Post reply on HN