Mac Malware Detections Dropped 38% in 2020, Most Still Adware

Antivirus software developer Malwarebytes today shared its 2021 State of Malware Report, which found that malware threat detections on Macs fell a total of 38 percent in 2020.

In 2019 Malwarebytes detected a total of 120,855,305 threats, which dropped to 75,285,427 threats in 2020. Consumer threats were down 40 percent, but as businesses operated remotely and shifted to online work, threat detections for business users grew 31 percent.

mac malware 2020
There was a drop in detections of Adware and potentially unwanted programs (PUPs), but Malwarebytes says that malware, which includes backdoors, data stealers, and cryptocurrency stealers/miners, increased by more than 61 percent.

That number sounds high, but malware still only accounted for 1.5 percent of all threat detections on the Mac, with the rest still coming from Adware and PUPs.

Potentially unwanted software represented more than 76 percent of detection in 2020, while Adware represented approximately 22 percent. These are overall numbers, and the breakdowns varied somewhat by country, but most Malwarebytes users are in the United States. Business machines saw a bit more malware and adware, with less unwanted software.

Of malware found on Macs, the top 10 malware families accounted for more than 99 percent of the total, with more than 80 percent detected due to suspicious behaviors. OSX.FakeFileOpener, malicious apps designed to open files, accounted for the second highest number of detections.

top mac malware 2020
Malwarebytes says that the most unusual Malware detected on Macs in 2020 was ThiefQuest, which spread through installers found on torrent sites. When infected, Macs would start to have files encrypted, with the malware providing ransom instructions.

These instructions went nowhere, though, and didn't provide a legitimate contact for removing the encryption. Instead, the ransomware was a cover for something more malicious.

Upon further investigation, we learned that the ransomware activity was really a cover for massive data exfiltration, including MS Office and Apple iWork documents, PDF files, images, cryptocurrency wallets, and more. This kind of malware, known in the Windows world as a "wiper," had never before been seen on Macs.

Even more interesting, the malware would inject malicious code into executable files found in the Users folder, such as components of Google Software Update, in a virus- like manner, another rarity in the Mac world. The combination of these features made ThiefQuest not only the most unusual Mac malware in 2020, but perhaps the most unusual Mac malware ever.

Sophisticated adware techniques were also spotted on Macs in 2020, including phishing for admin passwords, using synthetic clicks to automate browser extension installations, modifying the sudoers file to maintain root permissions indefinitely, and manually editing the TCC database to give the adware more system access.

On Macs, Malwarebytes says that the "business model of choice for most criminals" remains Adware, with trojans, worms, spyware, and RiskWareTools being more common on Windows machines. Still, malware is an increasing Mac problem and it's something that Mac users should be aware of.

Malwarebytes' full report can be read on the Malwarebytes website.

Top Rated Comments

steve09090 Avatar
3 weeks ago
From the report.

Windows detections - 111,014,261 (down 12%)
Mac detections - 75,285,427 (down 38%)
Android detections show it getting much "nastier" and detections are increasing exponentially. (No overall numbers)
iOS detections - nothing reported Other than "it’s possible as some vulnerabilities exist"

That walled garden is looking quite lush...
Score: 16 Votes (Like | Disagree)
ArPe Avatar
3 weeks ago

what's the best solution to tackle malware or other harmful thinks on Mac? Any ideas? Any software I need to buy?
Stay away from torrent sites ?

Don’t install pirate apps ?

Stay away from illegal streaming sites ?

Stay away from crypto sites ?

Don’t click on shortened URLs sent or posted by anon accounts on social media ?

Don’t install more apps than you really need ?

Only use signed apps from well known developers ?
Score: 12 Votes (Like | Disagree)
ian87w Avatar
3 weeks ago
Sometimes I have to wonder people who have enough money to buy a Mac, but cheapen out on the software or content that they have to rely on pirate torrents.

I mean it’s understandable for a person who can barely afford $400 Windows laptop to take the piracy route. But I have a hard time feeling any sympathy for someone capable of affording $1k-$2k Mac yet being a cheapskate on software and content. With so many free apps available, and many apps being more affordable on mobile, piracy imo is more of personal choice nowadays.
Score: 10 Votes (Like | Disagree)
wanha Avatar
3 weeks ago

what's the best solution to tackle malware or other harmful thinks on Mac? Any ideas? Any software I need to buy?
An Apple engineer who was helping me with an unusual issue last year recommended Malwarebytes.

He said it is Apple support's go-to malware app in instances where one is needed (which, fortunately, is quite rare).
Score: 4 Votes (Like | Disagree)
LV426 Avatar
3 weeks ago

what's the best solution to tackle malware or other harmful thinks on Mac? Any ideas? Any software I need to buy?
The best solution is to install software from the App Store. If you do this, it is very unlikely you will have problems in the first place.

If you don't, be very careful indeed where you get your software. Don't go to torrent sites or such to get software. You're just asking for trouble if you do that. There are reputable software vendors who don't use the App Store, but you will need to take special measures on your machine to allow such programs to be installed. The default is to only allow App Store programs to be installed.

There are, of course, plenty of dodgy websites that will drop, or try to drop, installers onto your computer. A classic ruse is "Your Flash player is out of date. Click here to update". If you happen to get one of those installers, and try to run it, you'll get a system popup asking for your Mac login details before it allows the installation to proceed. You should, therefore, be very wary indeed if you ever see something like that, and cancel the installation.
Score: 4 Votes (Like | Disagree)
lkrupp Avatar
3 weeks ago

Often the person buying the computer is not the same person buying software. For example, children being issued Macs from school or given one by parents will sometimes have no way of obtaining some content or software so they resort to piracy. Additionally, some subscriptions are quite expensive. Adobe can charge hundred of dollars yearly, which is not a small amount even if you could afford Mac hardware.
Sounds to me like you are condoning piracy. If you can’t afford it it’s okay to steal it? Unfortunately that is the mentality that has been instilled in the culture over the years.
Score: 4 Votes (Like | Disagree)

Top Stories

bloodoxygenapplewatch

Apple Watch Series 7 to Gain Breakthrough New Health Feature

Friday March 5, 2021 5:34 am PST by
Apple is reportedly planning to bring a new, first-of-its-kind health technology to the Apple Watch Series 7, in what could be a breakthrough for managing conditions such as diabetes more easily. According to a recent report from ETNews, the Apple Watch Series 7 will feature blood glucose monitoring via a non-invasive optical sensor. Measuring blood glucose levels, also known as blood...
apple transfer google photos 1

Apple Launches Service for Transferring iCloud Photos and Videos to Google Photos

Wednesday March 3, 2021 12:04 pm PST by
Apple this week introduced a new service that's designed to make it quick and easy for iCloud users to transfer their stored photos and videos to Google Photos. As outlined in an Apple support document, you can go to Apple's privacy website and sign in to see the "Transfer a copy of your data" option. If you select this and go through all the steps, Apple will transfer your iCloud photos and ...
imac pro featured black

Apple Confirms iMac Pro Will Be Discontinued When Supplies Run Out, Recommends 27-Inch iMac

Saturday March 6, 2021 7:33 am PST by
Apple on late Friday evening added a "while supplies last" notice to its iMac Pro product page worldwide, and removed all upgrade options for the computer, leaving only the standard configuration available to order for now. We've since confirmed with Apple that when supplies run out, the iMac Pro will no longer be available whatsoever. Apple says the latest 27-inch iMac introduced in August...
Oled iPads and MackBook Pro

OLED 10.9-Inch iPad Rumored for Early 2022, 12.9-Inch iPad Pro and 16-Inch MacBook Pro Could Follow

Thursday March 4, 2021 8:37 pm PST by
Earlier today, DigiTimes shared a preview of an upcoming report claiming that Apple is working on both iPad and Mac notebook models with OLED displays that could launch starting in 2022. The full report from DigiTimes is now available, and it includes several new alleged details about Apple's plans. According to the report, the first of these devices to adopt an OLED display is likely to be...
apple products refurbished store banner

Class Action Lawsuit Over Apple Providing Refurbished Replacement Devices Proceeding to Trial in August

Friday March 5, 2021 9:53 am PST by
Initially filed in 2016, a class action lawsuit that accuses Apple of violating the Magnusson-Moss Warranty Act, Song-Beverly Consumer Warranty Act, and other U.S. laws by providing customers with refurbished replacement devices is set to proceed to trial August 16, according to a notice this week from law firm Hagens Berman Sobol Shapiro LLP. Apple's repair terms and conditions state that,...
iPhone 13 Notch Feature2

iPhone 13 Rumor Recap: Smaller Notch, Larger Batteries, 120Hz for Pro Models, Improved 5G, Wi-Fi 6E, and More

Friday March 5, 2021 8:20 am PST by
While we are likely at least six months away from Apple unveiling the so-called iPhone 13 lineup, rumors about the devices are starting to accumulate, so we've put together this recap of everything that is expected so far. The upcoming iPhone 13 lineup will consist of the same four models and the same screen sizes as the iPhone 12 lineup, according to reputable analyst Ming-Chi Kuo,...
maxresdefault

What's on Your iPhone Home Screen?

Thursday March 4, 2021 10:31 am PST by
Over on our YouTube channel, MacRumors videographer Dan has a new video up where he shares his Home Screen, wallpaper, and all of his current favorite widgets. Subscribe to the MacRumors YouTube channel for more videos. Check out Dan's video to see his setup, and then comment below and show us your own Home Screens. It's always fun to see other peoples' Home Screens, and with widgets and...
OLED iPad Pro and MacBook Pro

iPad and MacBook Models With OLED Displays Rumored to Launch in 2022

Thursday March 4, 2021 8:19 am PST by
Apple plans to release new iPad and MacBook models with OLED displays in 2022, according to industry sources cited by Taiwanese supply chain publication DigiTimes. The information was shared in the site's paywalled "Before Going to Press" section, so there are no further details yet, but the full report should be released by tomorrow. Apple has gradually increased its adoption of OLED...
Top Stories 48

Top Stories: iPhone 13 Leaks, OLED iPads and Macs, New AirTags Evidence

Saturday March 6, 2021 6:00 am PST by
iPhone rumors are heating up, with noted analyst Ming-Chi Kuo this week releasing a wide-ranging report outlining his expectations for the iPhone lineup over the next three years. This week also saw rumors about OLED displays potentially coming to iPad and Mac starting next year, increasing signs of AirTags functionality in iOS 14.5 betas, and more, so check out all of the details below! i...
imac pro while supplies last

iMac Pro No Longer Custom Configurable, Available 'While Supplies Last'

Friday March 5, 2021 10:14 pm PST by
Apple appears to be on the verge of discontinuing the iMac Pro, with the store page for the high-end all-in-one Mac including a "While supplies last" tagline and only the base model with no custom configurations available for purchase. The iMac Pro launched in December 2017, and while there have been a few tweaks to the available configurations over the years, it has received no substantial...