Video of Mac Defender Malware Installation

by

ZDNet's coverage of the latest Mac Developer malware includes a full video of what it looks like to get infected by Mac Defender:

As Macenstein notes, it's easy to imagine someone getting tricked by the process.

After watching this I suppose I could see how someone (who is fairly trusting, not all that tech savvy, and easily scared) could be tricked into letting this install on their system, so I’m not AS “what kind of idiot got this?” as I once was.

Apple has recently release a software update that addresses at least some variants of Mac Defender, but users should be cautious as new versions seem to be popping up already.

Ed Bott also shows what happens when Mac OS X detects the dangerous download:

But even with Apple's protection, it's a confusing mess of windows and dialog boxes that could leave the user uncertain what to trust.

Top Rated Comments

(View all)
Avatar
120 months ago
I haven't been paying THAT close attention to this story, but I didn't realize that you had to be completely naive and gullible (no offense to any reading this that fell for it) to get nailed. I thought it happened more in the background. It looks like you pretty much have to open up the door to your computer and invite the hacker in and offer him or her a beer.

Am I understanding this right? You have to fairly pro-actively install this on your computer, it doesn't happen behind the scenes like Microshaft products do?
Score: 6 Votes (Like | Disagree)
Avatar
120 months ago

I would be EXTREMELY LIVID if Apple arbitrarily decided to close all of my Safari windows simply because I randomly encountered a stupid hack social engineering trojan. (FYI, at this particular instant I have over 50 active web page tabs open in 14 Safari windows and this has been a slow night.)


Well I guess closing all windows would be a bit extreme, but they could make use of Apples sandboxing technology and close just the tab that the download started in. That sounds a bit more reasonable, no?
Score: 4 Votes (Like | Disagree)
Avatar
120 months ago
To think, everyone freaked out over this. This has been going on for a few years now, and each time a news article pops up about it, the "Macs better watch out now!", "the Macs aren't so safe now!", "Look who's got viruses now!". It's a bunch of hype. :p

Quite amusing and annoying at the same time.

Move along folks, this ain't nothing new yet.
Score: 2 Votes (Like | Disagree)
Avatar
120 months ago

I haven't been paying THAT close attention to this story, but I didn't realize that you had to be completely naive and gullible (no offense to any reading this that fell for it) to get nailed. I thought it happened more in the background. It looks like you pretty much have to open up the door to your computer and invite the hacker in and offer him or her a beer.

Am I understanding this right? You have to fairly pro-actively install this on your computer, it doesn't happen behind the scenes like Microshaft products do?

Yes, you're understanding it right. As is the case with 100% of all Mac OS X malware that exists in the wild (which is only a handful of trojans), nothing can infect your Mac unless you deliberately, intentionally, actively install it.

Good thing I use Firefox :)

That makes no difference, since this lame threat is not browser-specific.

OS X systems rarely have anti-viruses installed on them, and the Mac Defender was able to slip through OS X's rather dire malware detecting system and infect systems.

Antivirus software isn't required to defeat this threat. It can be easily thwarted by an informed, careful user.

I know OS X cannot get a true virus,

False. Mac OS X is not immune to viruses. There just aren't any in the wild.

Wow, you have to hit INSTALL to get infected? From how it was reported, it sounded like it was some sort of automatic thing. Sure, it doesn't require a password to install, but after seeing this I'd say you really DO need to be an idiot to install this.

This is the case with all malware that exists in the wild. None of it can affect Mac OS X unless the user actively installs it.
Score: 2 Votes (Like | Disagree)
Avatar
120 months ago

Good thing I use Firefox :)


Why do people think that Firefox is immune to this? It is not.

The flaw is in the user.

Whether using Safari or Firefox, flawed users can easily install the MacDefender malware.
Score: 2 Votes (Like | Disagree)
Avatar
120 months ago
Wow, you have to hit INSTALL to get infected? From how it was reported, it sounded like it was some sort of automatic thing. Sure, it doesn't require a password to install, but after seeing this I'd say you really DO need to be an idiot to install this.

This isn't a virus or anything close to it, it's much more like a phishing email where the user is foolish enough to hand over the keys. It's great that Apple is putting in protection for this, but these sorts of threats will always be around and the solution is for people to have the common sense to not click INSTALL on an app that they didn't ask to download and that they've never heard of.

Honestly, seeing this video makes me feel like macs are MORE secure.

Although Apple could make the warning/remove interface less confusing. I'd almost say they should just block it automatically instead of giving the user a choice, and block the website as well.
Score: 2 Votes (Like | Disagree)

Top Stories

iPhone Maker Foxconn Says China's 'Days as the World's Factory Are Done'

Wednesday August 12, 2020 7:55 am PDT by
China will no longer be the world's manufacturing epicenter going forward, according to Apple's largest supply chain partner Foxconn, which has been gradually expanding its operations in other countries amid the U.S.-China trade war. "No matter if it's India, Southeast Asia or the Americas, there will be a manufacturing ecosystem in each," said Foxconn chairman Young Liu, according to Bloombe...

Leaker Jon Prosser: Apple Watch and iPad Launching in September, iPhone 12 Event to Take Place in October

Wednesday August 12, 2020 4:31 pm PDT by
Apple last month confirmed that this year's iPhone 12 models will launch outside of their normal September timeframe and will be "available a few weeks later," which has led to speculation about when an event might be held. Leaker Jon Prosser, who sometimes shares accurate knowledge of Apple's plans, today said that Apple will hold its iPhone 12 event during the week of October 12, with...

Apple Takes Legal Action Against Small Company With Pear Logo

Saturday August 8, 2020 11:09 am PDT by
Apple is taking legal action against the developers of the app "Prepear" due to its logo, according to iPhone in Canada. Prepear is an app that helps users discover recipes, plan meals, make lists, and arrange grocery deliveries. The app is a spinoff of "Super Healthy Kids," and the founders claim that they are facing litigation from Apple. Apple reportedly takes issue with Prepear's logo, ...

Apple to Launch Bundled Subscription Services Called 'Apple One'

Thursday August 13, 2020 3:41 am PDT by
Apple will launch a new range of subscription service bundles called "Apple One" as soon as October, according to a new report by Bloomberg's Mark Gurman. The series of bundles would allow customers to subscribe to several Apple digital services together. This is expected to result in a lower monthly price than when the services are subscribed to individually. Bloomberg reports that the...

Apple Releases iOS and iPadOS 13.6.1 With Fix for Storage Issue and Green Tinted Displays

Wednesday August 12, 2020 1:31 pm PDT by
Apple today released iOS and iPadOS 13.6.1, minor updates that come a month after the release of the iOS 13.6 update with Car Keys and Audio Apple News+ stories. The iOS and ‌iPadOS‌ 13.6.1 updates are available on all eligible devices over-the-air in the Settings app. To access the updates, go to Settings > General > Software Update. iOS 13.6.1 addresses an issue that could cause...

Apple May Release 4G-Only iPhone 12 in Early 2021

Tuesday August 11, 2020 5:28 am PDT by
In a research note shared by Business Insider, Wedbush Securities analysts said that Apple may release a cheaper iPhone 12 in early 2021 with no 5G connectivity. Wedbush initially believed Apple would launch a mix of 4G and 5G iPhone 12 models this fall. Following re-examination of Asian supply chains, analysts Daniel Ives, Strecker Backe, and Ahmad Khalil revised the predictions,...

Apple Removes Fortnite From App Store [Update: Epic Files Lawsuit Against Apple]

Thursday August 13, 2020 11:58 am PDT by
Just hours after Epic Games introduced a new direct payment option for Fortnite that skirts Apple's in-app purchase rules, Apple has pulled the Fortnite app from the App Store. Fortnite is no longer available for download on the iPhone or the iPad, and Apple provided a statement to MacRumors on Fortnite's removal:Today, Epic Games took the unfortunate step of violating the App Store...

iPad Pro Keyboard Comparison: Logitech's $160 Folio Touch vs. Apple's $300 Magic Keyboard

Tuesday August 11, 2020 2:11 pm PDT by
Logitech recently debuted the Folio Touch, a keyboard and trackpad case designed for the 11-inch iPad Pro that serves as an alternative to the Magic Keyboard. In our latest YouTube video, we compare the $160 Folio Touch to Apple's $300 Magic Keyboard to see which is better. Subscribe to the MacRumors YouTube channel for more videos. Logitech is selling the Folio Touch for $160, while Apple's...

Apple Releases macOS Catalina 10.15.6 Supplemental Update With Virtualization Bug Fix

Wednesday August 12, 2020 1:20 pm PDT by
Apple today released a supplemental update for macOS Catalina 10.15.6, with the update coming a month after the original launch of macOS Catalina 10.15.6. The ‌‌macOS Catalina‌‌ 10.15.6 Supplemental Update can be downloaded from the Mac App Store using the Update feature in the System Preferences app. According to Apple's release notes, the update fixes a problem that could cause...

Kuo: Global iPhone Shipments Could Decline Up to 30% If Apple Forced to Remove WeChat From App Store [Updated x2]

Sunday August 9, 2020 10:17 pm PDT by
In a worst-case scenario, Apple's annual global iPhone shipments could decline by 25–30% if it is forced to remove WeChat from its App Stores around the world, according to a new research note from analyst Ming-Chi Kuo viewed by MacRumors. The removal could occur due to a recent executive order aiming to ban U.S. transactions with WeChat and its parent company Tencent. Kuo lays out...