Mac App Store App 'Adware Doctor' Discovered Stealing User Browsing History [Update: Removed]

[GGJstudios]

Either way, please stop giving such horribly misguided advice out. The idea that people might read it and follow it is terrifying.

So it's terrifying to you that people might start practicing safe computing? The fact is that practicing safe computing alone will protect a Mac from malware better than using antivirus software alone. It's irresponsible to lead people to believe that if they just install the right AV app, they'll be safe, without any need to modify their computing habits. Now that is terrifying.

And often factually wrong too. Mac malware is quite common.

It actually isn't. Go back and read the malware threats that have been reported and the numbers affected. They are a tiny percentage of Mac users. Usually threats are identified and defenses are built before most Mac users even hear about them.

Would you consider Transmission BT a known app? Reliable app? Getting that app from its own server would constitute 'reputable source' right?

Now, remember the fiasco, twice at that?

Even this is an example of how small a percentage of Mac users have been exposed to malware.

https://blog.malwarebytes.com/threat-analysis/2016/09/transmission-hijacked-again-to-spread-malware/
"Thus, as with KeRanger, which was also quickly detected and taken down, the total number of people infected is likely to be small"

In both instances, the infected versions were only available for a few days, before the threat was identified and removed. Nothing will keep a computer completely safe from all potential threats, but practicing safe computing will provide better protection than leaving computer security up to 3rd party software.

... there is no chance I will become a client, or recommend the business to anyone I know.

You assume: 1. That my username represents a business. 2. That such a business has clients. 3. That you would qualify as a client. 4. That the business would seek a recommendation from you or anyone.

That's a lot of assumptions, all of which are false.

In today's times, and since a long time, people are expected to secure their computers and it is not going to change.

What also isn't going to change is me and others recommending the best way to defend against malware. Whether or not people choose to follow the advice is up to them. I'm not going to stop the recommendations just because some choose to ignore them.

 

[john123]

So it's terrifying to you that people might start practicing safe computing? The fact is that practicing safe computing alone will protect a Mac from malware better than using antivirus software alone. It's irresponsible to lead people to believe that if they just install the right AV app, they'll be safe, without any need to modify their computing habits. Now that is terrifying.

It actually isn't. Go back and read the malware threats that have been reported and the numbers affected. They are a tiny percentage of Mac users. Usually threats are identified and defenses are built before most Mac users even hear about them.

Even this is an example of how small a percentage of Mac users have been exposed to malware.

https://blog.malwarebytes.com/threat-analysis/2016/09/transmission-hijacked-again-to-spread-malware/
"Thus, as with KeRanger, which was also quickly detected and taken down, the total number of people infected is likely to be small"

In both instances, the infected versions were only available for a few days, before the threat was identified and removed. Nothing will keep a computer completely safe from all potential threats, but practicing safe computing will provide better protection than leaving computer security up to 3rd party software.

You assume: 1. That my username represents a business. 2. That such a business has clients. 3. That you would qualify as a client. 4. That the business would seek a recommendation from you or anyone.

That's a lot of assumptions, all of which are false.

What also isn't going to change is me and others recommending the best way to defend against malware. Whether or not people choose to follow the advice is up to them. I'm not going to stop the recommendations just because some choose to ignore them.

This isn't my first rodeo with you on these forums, so I'll stop wasting my time. You don't know what you're talking about. Your list of assumptions is flat-out wrong (and doesn't even make sense). You've created a false either/or dichotomy. You continue to dispense dangerous advice. It's a shame, but fortunately I've set the record straight for anyone who has read the exchange.

 

[macintoshmac]

So it's terrifying to you that people might start practicing safe computing? The fact is that practicing safe computing alone will protect a Mac from malware better than using antivirus software alone. It's irresponsible to lead people to believe that if they just install the right AV app, they'll be safe, without any need to modify their computing habits. Now that is terrifying.

It actually isn't. Go back and read the malware threats that have been reported and the numbers affected. They are a tiny percentage of Mac users. Usually threats are identified and defenses are built before most Mac users even hear about them.

Even this is an example of how small a percentage of Mac users have been exposed to malware.

https://blog.malwarebytes.com/threat-analysis/2016/09/transmission-hijacked-again-to-spread-malware/
"Thus, as with KeRanger, which was also quickly detected and taken down, the total number of people infected is likely to be small"

In both instances, the infected versions were only available for a few days, before the threat was identified and removed. Nothing will keep a computer completely safe from all potential threats, but practicing safe computing will provide better protection than leaving computer security up to 3rd party software.

You assume: 1. That my username represents a business. 2. That such a business has clients. 3. That you would qualify as a client. 4. That the business would seek a recommendation from you or anyone.

That's a lot of assumptions, all of which are false.

What also isn't going to change is me and others recommending the best way to defend against malware. Whether or not people choose to follow the advice is up to them. I'm not going to stop the recommendations just because some choose to ignore them.

One, do not change the goalposts. First you say people should practice hygiene, then when you are pointed out that despite hygiene, crap can enter the system unbeknownst, you change the goalpost by saying but look how small a number of people get infected.

Two, advise all you want, just make sure it is rock solid. Saying internet hygiene is ALL that is needed is false and misleading.

 

[MacsRuleOthersDrool]

Your quotes remind me of a kid who get's caught doing something wrong. Instead of owning it, he starts to tell what everyone else did hoping it will somehow lessen his guilt by comparison. Carry on.

That's ridiculous.

 

[GGJstudios]

Your list of assumptions is flat-out wrong (and doesn't even make sense).

State what assumptions you claim are wrong, and provide proof of your claim.

One, do not change the goalposts. First you say people should practice hygiene, then when you are pointed out that despite hygiene, crap can enter the system unbeknownst, you change the goalpost by saying but look how small a number of people get infected.

Two, advise all you want, just make sure it is rock solid. Saying internet hygiene is ALL that is needed is false and misleading.

You should take a bit more time to read my posts entirely before responding. I do say that people should practice safe computing. I did not say that doing so would provide 100% protection against anything, just as installing a 3rd party antivirus app won't provide 100% protection. There is no such thing as 100% protection. As for the Transmission infections, even if you had antivirus software installed at the time, they would not have detected the malware, since it had not yet been discovered. The first infection affected approximately 7,000 Macs, which is a microscopic percentage of the millions of Macs in the world.

I did say that practicing safe computing would provide more protection than simply installing an antivirus app, which has been proven to be true countless of times, especially in the case of zero-day threats that were easily avoided by practicing safe computing, when antivirus apps had not even been updated to detect the threats. Understanding just a bit of history on this topic would prove to you that what I'm saying is accurate.

 

[HBX]

If it ain't Titanium Software or ObjectiveSee I don't use it. Only AV I use periodically is the CLI version of ClamAV. It's sad people still resort to using gimmicky apps.
[doublepost=1536592955][/doublepost]It's funny tho their website explicitly says to remove the app in the event you don't agree with their privacy policy. https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119854.aspx

 

[Vlad.E.]

Apple needs to do a better job vetting these rogue apps.

 

[PseudoRegister]

Wouldn't it be great if Apple returned it's share of the venue generated from sales of this app to the consumers who were scammed by it? I realize it would only be about a $1 per user, but hey it's something.

Then maybe sue the pants of the app developer and give the scammed users the developers' pants?

 

[john123]

If it ain't Titanium Software or ObjectiveSee I don't use it. Only AV I use periodically is the CLI version of ClamAV. It's sad people still resort to using gimmicky apps.
[doublepost=1536592955][/doublepost]It's funny tho their website explicitly says to remove the app in the event you don't agree with their privacy policy. https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119854.aspx

Add a +1 for Clam and periodic use right here. It's lightweight and does the job effectively.

My company uses Kapersky for most of the computers it owns. On a scale of 1 to "no way"....

 

[raghu8912]

As if the states is any better.

App developers in USA are far better than China for sure, no question about it. At least they are upfront on what data they use. you may find some apps stealing, but we have to look at no of apps or incidents like this to come to a conclusion.
[doublepost=1536703884][/doublepost]

Why does the Mac App Store still exist? It only has ****** scam apps and nothing that you actually need. Furthermore, you’re supposed to trust the App Store, because it’s “curated”, but then this kind of stuff happens. It would be better if Apple simply posted a “Gallery” of apps, like they do for safari extensions.

There are so many apps from Chinese developers in Mac App Store that pretend to be MS office, they don't have any websites, for any help, there should be an option win App Store to report to Apple about these apps, I couldn't find any.

 

[Tech198]

There are so many apps from Chinese developers in Mac App Store that pretend to be MS office, they don't have any websites, for any help, there should be an option win App Store to report to Apple about these apps, I couldn't find any.

I feel ok with it.. users helping won't be any better... Apple still must approve them anyway, so that only leaves, it would be "faster" reporting within say 24 hours, but that's marginal compared to other stores: Google playstore for instance.