Live data from Hacker News

MacKeeper 0-day flaw more than 20M users affected

thehacktimes.com

41–50 of 54 posts

Re: MacKeeper 0-day flaw more than 20M users affected

#41

Wait, MacKeeper is actual software? I just thought it was just another piece of malware with a strangely good pop-up in comparison to other malware pop-ups.

You're not wrong, that's pretty much all it is.

(Oh, and it bundles a bunch of inferior versions of features already built-in to Mac OS X, like backups, file searching, data encryption, secure delete, login item disabling, default app selection, etc.)

Re: MacKeeper 0-day flaw more than 20M users affected

#42
post #18

Earlier quoted context omitted.

I was wondering from where this number is coming from...

Their compani is based in Ukraine so you would probably need russian language to dig a bit in tho publicly available documents, but i found that number somewhere on twitter, and am sure its correct. Another proof how much dumb people are living on this wonderful planet..

I honestly thought it was an out of mind number, but thinking about how aggressive is their advertising campaign, sometimes almost misleading and the average knowledge of a user, well, I am not sure is out of mind anymore...

Re: MacKeeper 0-day flaw more than 20M users affected

#43
post #16

Not sure if anyone knowingly installs MacKeeper but I accidentally accepted the download for MacKeeper when I was trying to install a Camera app. Big mistake and I tried to stop the installation. MacKeeper is a nasty piece of malware. I couldn't quit the program, it would immediately start back and putting it in the trash did nothing. Ended up having to boot into safe mode and remove. Well as soon as I got it off my…

I don't see why apple doesn't ban them.

Even in the Mac App Store, Apple permits scammy apps such as "Memory Clean" [1] that consistently ends up in top ranks/top grossing. For one, "RAM cleaning" does nothing helpful and theoretically can make your Mac less performant. Bonus: the app calls home to push the developer's other apps.

I'm surprised stuff like this prospers in plain sight with Apple's tacit approval. Snake oil for non-power users who don't know better.

[1] https://itunes.apple.com/us/app/memory-clean/id451444120?mt=...

Re: MacKeeper 0-day flaw more than 20M users affected

#44

I have a MacKeeper related question: are apps such as this (cleaners, antivirus etc.) necessary for Mac computers? Judging by the number of users affected by this, there are a lot of people thinking they do need it, I guess.

If you stick to official software and don't care to scan documents for windows viruses and such, you won't need any antivirus. I do however use CleanMyMac 2 to remove stuff I don't use, this is the only piece of "cleaning" software that I think is actually worth it. I like how it helps me getting rid of logs and language files in a lazy way :)

Re: MacKeeper 0-day flaw more than 20M users affected

#45
MacKeeper will execute arbitrary base64 encoded commands on a custom url as root.

I guess it's a "flaw" but whoever put that in knew that would come back to bite. Haha, it's so insanely irresponsible that I don't even know where to start.

We need something like a hippocratic oath, and probably a governing body (or however grown up industries manage themselves), to stop people responsible for this sort of code from having a license to practice.

Re: MacKeeper 0-day flaw more than 20M users affected

#46

20M MacKeeper users seems like an extraordinary number.

Let's say there is an installed base of 2 billion personal computers, let's say 10% of those are Macs, that's 200 million, 10% of those would have to have MacKeeper installed to hit 20m users.

Re: MacKeeper 0-day flaw more than 20M users affected

#47

Earlier quoted context omitted.

I once saw a coworker accidentially installing it and it surely is a nasty piece of malware. The problem is that one can never be quite sure whether every piece of the software was removed, which is why we ended up just reinstalling OS X and avoid guessing. Since then, a few of my friends, who aren't into tech, almost installed MacKeeper. They all had a long history of using Windows and felt that installing some Anti…

http://mackeeper.com/uninstall_mackeeper

I don't trust borderline malware to uninstall itself.

http://www.imore.com/avoid-mackeeper

> What's more, "uninstalling" MacKeeper doesn't get rid of all of it — you'll find various traces of it in your Mac's system library folder, and they take a bit to get rid of (just search for anything with zeobit or MacKeeper in the name, and you'll turn up files).

Re: MacKeeper 0-day flaw more than 20M users affected

#48
post #22

Earlier quoted context omitted.

I once saw a coworker accidentially installing it and it surely is a nasty piece of malware. The problem is that one can never be quite sure whether every piece of the software was removed, which is why we ended up just reinstalling OS X and avoid guessing. Since then, a few of my friends, who aren't into tech, almost installed MacKeeper. They all had a long history of using Windows and felt that installing some Anti…

Their website[1] looks awesome, I don't own a Mac (Windows user) but if I were to buy one I would definitely consider buying and using it. It's good that this site[2] is the second result on Google for "mac keeper" though. 1. http://mackeeper.com 2. http://www.imore.com/avoid-mackeeper

Surprisingly, it does - I just knew them for their shady ads and popups which clearly scream "don't install this!", but this website looks absolutely legitimate. Color me surprised.

Re: MacKeeper 0-day flaw more than 20M users affected

#50
post #43
post #16

Not sure if anyone knowingly installs MacKeeper but I accidentally accepted the download for MacKeeper when I was trying to install a Camera app. Big mistake and I tried to stop the installation. MacKeeper is a nasty piece of malware. I couldn't quit the program, it would immediately start back and putting it in the trash did nothing. Ended up having to boot into safe mode and remove. Well as soon as I got it off my…

I don't see why apple doesn't ban them. Even in the Mac App Store, Apple permits scammy apps such as "Memory Clean" [1] that consistently ends up in top ranks/top grossing. For one, "RAM cleaning" does nothing helpful and theoretically can make your Mac less performant. Bonus: the app calls home to push the developer's other apps. I'm surprised stuff like this prospers in plain sight with Apple's tacit approval. Snak…

Worse than that, that app claims to be "FEATURED BY APPLE AS AN INVALUABLE UTILITY 2014"
Post reply on HN