Two new pieces of malicious software aimed at Mac computers have been discovered on the Dark Web, offered through Malware-as-a-Service (MaaS) and Ransomware-as-a-Service (RaaS) portals and estimated to have been up for around the past three weeks, beginning May 25. Originally spotted by Bleeping Computer, the two portals offer software called "MacSpy" and "MacRansom" as services for potential buyers, as well as any future support that may be needed for the malware (via Motherboard).

Both portals are the work of the same malware developer, but security firms Fortinet and AlienVault described the person behind the scheme as an "inexperienced coder," pointing towards issues like the lack of digitally signed files, meaning the security measures on a standard installation of macOS would still be alerted to the malware. The researchers called MacSpy the "better-coded tool," but said MacRansom was more dangerous since it "has the potential to permanently wreck user files," if users of malicious intent ever wielded it.

macspy malware

Thankfully, the process by which crooks would have to go about getting either MacSpy or MacRansom will likely prevent either piece of malware from spreading. Both portals are described as "closed" offerings, meaning anyone wanting to actually purchase the services off the Dark Web would have to contact the author to receive demo packages, and then directly negotiate payment. As such, "none of these two appear to be part of any active distribution campaigns."

All the same, as Mac-focused security researcher Patrick Wardle told Motherboard, the increasing intent of cyber criminals to infect Apple's computers is "kind of a milestone." Security reporter Ruben Dodge said that macOS and iOS have so many "less technical people" using the software that it's simply too "ripe" of a target for criminals not to take notice. Although MacRansom and MacSpy aren't expected to take off in that way, Dodge said "it's only a matter of time" before another piece of malware or ransomware does.

Ruben Dodge: "There's an ideological shift for Mac and iPhone as being seen as the more friendly OS for older people. [...] It is a market that will be targeted. There are too many less technical people using it not to make it a 'ripe' target for threat actors."

Patrick Wardle: "Apple continues to improve the security of them," Wardle said. "But Mac users should just be cautions, should not be not be overconfident, and should not assume that just because they're using a Mac they're inherently safe."

Malware attacks on Mac computers were up 744 percent in 2016, although that percentage was largely weighted due to adware bundling in software on MacBooks and iMacs, which is far less alarming than any potential wide-scale malware purchased by a criminal on the Dark Web. Still, Bleeping Computer pointed out in its report that Mac ransomware in particular -- which holds user data ransom until a fee is paid -- has been steadily growing over the past year.

The number of Macs has grown, and so has the number of Mac-targeting malware. The launch of MaaS portals, even if hard to use and engage with as MacSpy and MacRansom, will drive more crooks towards the Mac userbase, and will lower the entry bar for some individuals and groups that had no previous experience with creating Mac malware.

As a rule of thumb, in order to stay safe users should only download apps and programs from Apple's own Mac App Store, and if an app is available only on a third-party website the developer behind the software should be trusted. Although Apple has long advertised the Mac as a truly anti-virus and anti-malware machine, Wardle reminds Apple fans to remain vigilant online: "Mac users...should not be overconfident, and should not assume that just because they're using a Mac they're inherently safe."

Tag: malware

Top Rated Comments

ignatius345 Avatar
49 months ago
As a rule of thumb, in order to stay safe users should only download apps and programs from Apple's own Mac App Store, and if an app is available only on a third-party website the developer behind the software should be trusted.
Nope. I check every Mac app I buy to see if it's available directly from the developer so they take 100% of the profits. Let's not use malware as an excuse to make sure the Mac is a walled ecosystem like iOS.
Score: 18 Votes (Like | Disagree)
batchtaster Avatar
49 months ago
I’ve seen it here before. Seen it most commonly on the official Apple forums though I must admit. When a new Mac virus pops up, an apologist comes along and says, "No actually it’s a Trojan Horse”. There is a difference of course I know that, but I also know it isn’t the point being made.
Well, it exactly is. If you can't get your terminology right, someone is going to correct you.
You could avoid that annoyance by not being wrong and not sounding like you don't know what you're talking about.
Score: 15 Votes (Like | Disagree)
batchtaster Avatar
49 months ago
Never, all they’ll tell you is that this is a worm and Macs still don’t get viruses. Or similar.
You seem to be under the misconception that there is no difference. That the mechanisms, vectors and payloads are indistinguishable or irrelevant.
There very much is, to the extent that the very people who research and combat these things coined the terms.
If you have a problem with the correct use of the terminology - as opposed to deliberately misusing it for sensationalism sake - then perhaps take it up with them.
Score: 7 Votes (Like | Disagree)
Fall Under Cerulean Kites Avatar
49 months ago
A piece of trojan software that can destroy files, but that is unsigned and requires manual intervention in order to not just install, but run, is not something I’m going to get excited about.
Score: 5 Votes (Like | Disagree)
iDento Avatar
49 months ago
Dear Apple,

I'd happily get all my apps from the MacAppStore when you give a damn, like how you redesigned the iOS AppStore for instance.
Score: 3 Votes (Like | Disagree)
xflashx Avatar
49 months ago
They should finally redesign and rewrite the AppStore completely and change their policies in a way so that developers are more attracted to it. Apps like VLC, texmaker, mactex, Chrome etc. should be present.

Right now the AppStore feels kind of abandoned.
Score: 2 Votes (Like | Disagree)

Top Stories

microsoft edge ios android

Bill Gates Says His Preference for Android Over iPhone is Due to Pre-Installed Software

Friday February 26, 2021 3:35 am PST by
Microsoft co-founder Bill Gates this week participated in his first meeting on Clubhouse, the increasingly popular invite-only conversation app, where he fielded a range of questions as part of an ongoing book tour. Gates was interviewed by journalist Andrew Ross Sorkin, and given that the Clubhouse app is currently only available on iOS, naturally one of the questions that came up was...
First Look Big Sur Feature2

Apple Releases macOS Big Sur 11.2.2 to Prevent MacBooks From Being Damaged by Third-Party Non-Compliant Docks

Thursday February 25, 2021 10:07 am PST by
Apple today released macOS Big Sur 11.2.2, the fourth update to the macOS Big Sur operating system that launched in November. macOS Big Sur 11.2.2 comes two weeks after the release of macOS Big Sur 11.2.1, a bug fix update. The new ‌‌‌‌macOS Big Sur‌‌‌ 11.2.2‌ update can be downloaded for free on all eligible Macs using the Software Update section of System Preferences....
flat mbp 14 inch feature yellow

Redesigned 14-Inch MacBook Pro Expected to Feature Brighter Mini-LED Display With Slimmer Bezels and More

Thursday February 25, 2021 7:48 am PST by
Apple plans to unveil new 14-inch and 16-inch MacBook Pro models with Mini-LED-backlit displays in the second half of this year, according to industry sources cited by Taiwanese supply chain publication DigiTimes. The report claims that Radiant Opto-Electronics will be the exclusive supplier of the Mini-LED backlight units, while Quanta Computer is said to be tasked with final assembly of the...
Top Stories 47 Feature copy

Top Stories: MacBook Pro, iMac, and AirPods Rumors, macOS 11.2.2, MagSafe Wallet Revisited

Saturday February 27, 2021 6:00 am PST by
March is right around the corner, and that means our first good opportunity for Apple product launches in 2021 as the company frequently has significant launches in March or April each year. We're hearing rumors about MacBook Pro, iMac, AirPods, and more, although many of these will be coming out at different times over the course of the year. This week also saw a macOS update to address a ...
maxresdefault

HomeKit Essentials Worth Checking Out

Saturday February 27, 2021 7:05 am PST by
HomeKit was slow to take off after its 2014 launch, but now that it's been around for seven years, there are hundreds of HomeKit products available, ranging from doorbells and speakers to TVs, lights, and cameras. In our latest YouTube video, we rounded up some of our favorite HomeKit products that we find most useful. Subscribe to the MacRumors YouTube channel for more videos. HomePod...
apple store macarthur center

Apple Store at MacArthur Center in Virginia Permanently Closing Following Years of Safety Issues at Shopping Mall

Thursday February 25, 2021 4:45 pm PST by
Apple today indicated that its retail store at the MacArthur Center shopping mall in Norfolk, Virginia will be permanently closing after over 14 years of business, although an exact closure date has yet to be announced by the company. Apple has assured that it will be offering all employees at the store other positions within Apple, and said that it looks forward to continuing to serve...
jon prosser imac 2021colors

Prosser: 2021 iMac to Come in Five Colors, Apple Silicon Mac Pro to Resemble 'Stacked' Mac Minis

Wednesday February 24, 2021 7:26 am PST by
Hit-and-miss leaker Jon Prosser has today alleged that the upcoming 2021 iMac models will offer five color options, mirroring the colors of the fourth-generation iPad Air, and revealed a number of additional details about the Mac Pro with Apple Silicon. In a new video on YouTube channel FrontPageTech, Prosser explained that the redesigned iMacs will come featuring options for Silver, Space ...
apple refurbished m1 mac mini

Apple Begins Selling Refurbished M1 Mac Mini

Thursday February 25, 2021 6:42 pm PST by
Apple today began selling certified refurbished Mac mini models with the M1 chip for the first time in the United States and Canada, with prices discounted by approximately 15 percent compared to brand new models as usual. For example, a refurbished Mac mini with the M1 chip, 256GB of SSD storage, and 16GB of unified memory is available for $759, compared to $899 brand new. Other custom...
mac mini developer transition kit photo feature

Apple Requiring Developers to Return DTK Mac Minis by March 31

Friday February 26, 2021 3:57 pm PST by
Apple today sent out emails to developers who are in possession of a Developer Transition Kit, asking them to return the machines by March 31. The Developer Transition Kits are Mac minis with A12Z chips that Apple provided for development purposes ahead of the release of the M1 Macs. Apple in the emails provided developers with shipping instructions, and plans to begin collecting the DTKs...
m1 mac mini

M1 Mac Users Report Excessive SSD Wear

Tuesday February 23, 2021 7:07 am PST by
Over the past week, some M1 Mac users have been reporting alarming SSD health readings, suggesting that these devices are writing extraordinary amounts of data to their drives (via iMore). Across Twitter and the MacRumors forums, users are reporting that M1 Macs are experiencing extremely high drive writes over a short space of time. In what appear to be the most severe cases, M1 Macs are sai...