New 'MACDefender' Variant Installs Without Admin Password Requirement

[0815]

Wirelessly posted (Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_2_1 like Mac OS X; en-us) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8C148 Safari/6533.18.5)

Perhaps apple needs to turn on their copiers once again and look to Microsoft as a model on how to do this.

You mean to distribute it to the Apple engineers to learn how not to do it?

 

[TheSideshow]

Yeah lets look to microsoft to see how it is done.

Lets compare:
Windows 7 vulnerable to 8 out of 10 viruses

And this one piece of malware discussed here is one out of millions of pieces of malware.

Frankly I do not see purchasing a windows machine as an intelligent choice at all. But fanboys will be fanboys.

Those weren't viruses. They were trojans and malware. As in Windows didnt stop a program from being installed, just like OS X here.

 

[Thunderhawks]

Silence is one of Apples oldest tactics for ignoring a problem. Only when the heat really increases with vast user push back, does Apple cave into the truth.

It's a unique situation. Apples the only one, out of all the premium / luxury product manufacturers I buy from that does this.

They do not ignore problems or hide. They just don't like to talk out of their butts.

Run Apple run. See Apple run? ha..ha..ha..

Any good company (which Apple is) investigates a problem, decides what has to be done and does it.

 

[archer75]

Yeah lets look to microsoft to see how it is done.

Lets compare:
Windows 7 vulnerable to 8 out of 10 viruses

And this one piece of malware discussed here is one out of millions of pieces of malware.

Frankly I do not see purchasing a windows machine as an intelligent choice at all. But fanboys will be fanboys.

Well that's a year and a half old.

I have about 7 computers in this house and aside from this imac they are all windows 7 x64. I can visit porn sites and pirate software all day long and still never had a virus/malware. I'd have to go out of my way to get one.

 

[toddybody]

Frankly I do not see purchasing a windows machine as an intelligent choice at all. But fanboys will be fanboys.

I dont think thats a fair statement...I like many Apple fans, use and enjoy Windows as well.

Until Apple gives me an affordable, user upgradeable, and HW agnostic system ...Ill still use Windows

 

[Rodimus Prime]

Yeah lets look to microsoft to see how it is done.

Lets compare:
Windows 7 vulnerable to 8 out of 10 viruses

And this one piece of malware discussed here is one out of millions of pieces of malware.

Frankly I do not see purchasing a windows machine as an intelligent choice at all. But fanboys will be fanboys.

You know I have to use your post and link as an example of how Apple fans use the term "virus" both ways. For OSX malware is not a virus but then you all use an example list this that all 10 of those are some type of trojan and under your previous defense they are not a virus.

Under what most people think of what a virus is (any type of malware) OSX has viruses. Under the rules you all use to defend apple (exactly what a virus is) Apple has no viruses.

 

[segfaultdotorg]

Taking a page from Microsoft's playbook, Apple's software update will be entitled "Apple Security Essentials."

 

[0815]

I just stumbled upon this malware in Google images. I don't understand how some of you can keep asking "who downloads this" and "they must be pretty stupid" etc. When you click cancel or the fake red X button on the webpage it still downloads the program. I got 3 copies of it in my downloads folder within 10 seconds.

Let's not forget that some people are new to macs and are used to the anti-virus software of PCs so when they see an alert telling them that they have a virus on a mac that's "not supposed to get them" they may panic and install it.

I stop defending these people when they actually pass over their card details though.

Nobody says (I hope, didn't read the full thread) that people who download it are stupid - since it happens automatically. The problem once the installer starts, that the user is selecting where to install it and clicking through the installer - that is, let's say, not the smartest thing to do (and as you mention, type their credit card info in)

 

[toddybody]

I can visit porn sites and pirate software all day long and still never had a virus/malware. I'd have to go out of my way to get one.

I wouldnt brag about that part🙄

 

[AppleScruff1]

Can't Apple sue them ?

I'm sure their lawyers are meeting about it now.

Misery loves company. If they have to suffer, they want everyone else to suffer. It's the worst part of human instincts to think that way, but sadly the world has such people in it.

So true.

It launches by itself, I actually encountered this just an hour ago, I was surfing google images, and the application downloaded and launched it self, although of course I cancelled and deleted it..

But if you disabled "Open Safe Files" on Safari then it doesn't launch automatically..

Anyway it's not really a problem for computer savvy people, but I think my parents would easily install this without knowing that it's actually malware..

So It's still an issue I think, obviously this is something that Windows has had in the past, still It should be no surprise, as more people begin to use Mac OS, viruses, trojan, malware/spyware will be a part of Mac OS, it'll be interesting to see how Apple handles this problem..

I agree. As time goes on this will be more common.

Not a virus. Honestly there should be a sticky thread or something explaining what a virus is.

Kind of like Clinton arguing about what is is?

 

[Rodimus Prime]

Nobody says that people who download it are stupid - since it happens automatically. The problem once the installer starts, that the user is selecting where to install it and clicking through the installer - that is, let's say, not the smartest thing to do.

trick is that it is only going to get worse. People will load in things like MACDefender into other software. Take it being cracks or pirated software. It is easier to payload the stuff in because people already are installing something so it is easy to slip it pass.

 

[archer75]

I wouldnt brag about that part🙄

Well I could....but won't. But my buddy on the other hand....😉

 

[zztype]

Sophos identifies immediately

I clicked a link to a story on slashdot.org but the url was hijacked and this nasty thing started multiple simultaneous downloads to my iMac instantly. The files were small zip archives, and 2.5 copies were downloaded and one had unzipped before I could cancel the download!

I jumped to the downloads folder to kill anything that I could find...

I was pleasantly surprised that Sophos Antivirus (Free) for Mac detected the threat immediately and thew up a warning window pointing out the paths to the malware files. Sophos could not automatically remove the files, but it did point me to the exact files which had been downloaded and instructed me to manually remove the files.

No connection with Sophos other than I run their software, and obviously, I am glad that I do!

 

[ten-oak-druid]

I just stumbled upon this malware in Google images. I don't understand how some of you can keep asking "who downloads this" and "they must be pretty stupid" etc. When you click cancel or the fake red X button on the webpage it still downloads the program. I got 3 copies of it in my downloads folder within 10 seconds.

Let's not forget that some people are new to macs and are used to the anti-virus software of PCs so when they see an alert telling them that they have a virus on a mac that's "not supposed to get them" they may panic and install it.

I stop defending these people when they actually pass over their card details though.

That is where I came across it too. I was in google images and macdefender downloaded when I clicked on an image. I've had this happen before. Usually it is a windows executable.

It is not usual behavior for the download window to appear with a download in progress after clicking on an image. It is obvious the file and disk image (if one opens) needs to be deleted.

I think most people getting macs do not have this euphoric mentality that they can click on anything and it is safe. The benefit of a mac is that you are extremely unlikely to encounter something that can harm you without your interaction.

There are people who will click on anything and they will get in trouble no matter the OS eventually. But is that an argument against macs being safer? I would also suggest that careless behavior such as clicking anything without thought likely suggests little concern over computers by the individual. Such people are likely to opt for cheap computers; if they are willing to click on anything without concern, then they are not concerned about specs and user interface either. Apple doesn't make cheap computers like these people are looking for. So I imagine the statistics are not in favor of many mac users clicking indiscriminately.

 

[samcraig]

What people have to understand is yes, the majority of Macrumors members are not going to fall for something like this.

The issue is the majority of the Mac userbase will, partly because they they believe Macs "Don't get viruses" (note the quotations before you pounce on it's malware ****, it's just the common user's thought). So if it happens to pop up (whether it asks for a admin password or not) they'll likely go through with it.

Your average Joe paid a premium for a Mac and this is one of the main reasons. If he gets infected it's likely he won't be back, and this must be a real concern for Apple.

Exactly what I've been saying in these threads.

It doesn't matter one IOTA what the semantics are - trojan, virus, malware, etc - the general public gets an issue with their computer and it all falls under the "virus" umbrella to them. You can argue over what program/code is what all day "in here" - but in the real world - they don't care.

And "virus" is also the blame for any computer slow down amongst those not fully educated. IE - when their system CREEPS to a halt because they have 17 programs/applications open and one 2 megs of RAM. All to often (I have seen it) the first question I've been asked or overheard "I think I have a virus - my computer is operating really slow"

Just one example.

 

[ten-oak-druid]

You know I have to use your post and link as an example of how Apple fans use the term "virus" both ways. For OSX malware is not a virus but then you all use an example list this that all 10 of those are some type of trojan and under your previous defense they are not a virus.

Under what most people think of what a virus is (any type of malware) OSX has viruses. Under the rules you all use to defend apple (exactly what a virus is) Apple has no viruses.

Hey if the people I'm posting that for want to use "virus" for all sorts of malware then I'll oblige.

Take it up with the other posters, not me.

I dont think thats a fair statement...I like many Apple fans, use and enjoy Windows as well.

Until Apple gives me an affordable, user upgradeable, and HW agnostic system ...Ill still use Windows

Of course it isn't a fair statement. But it was for the benefit of "fanboy" hurling individuals who seem to be orgasmic over the prospect of OS X malware (while calling it a virus). It wasn't meant for fair minded and reasonable people like yourself.

 

[z3r0]

Will Apple release Lion already or Safari with sandboxing already.

http://cocoaheads.tumblr.com/post/3483212346/lion-sandboxing-and-privilege-separation

Hopefully it will be a FreeBSD Jails port. Capsicum wouldn't hurt either. Running Safari in a Jail/Sandbox would stop these things cold.

 

[Blue Fox]

Still not a virus......not even close. Not even a true threat unless you really are that ignorant to put in your credit card information to a program that just pops up out of nowhere.

Not to mention, it's not even that bad of a malware to be honest. Most of the Windows malware/scareware/randsomware completely hijack the system and will not let you do anything until someone goes into the registry and messes around there, and then has to dig deep into the system files to get rid of its remains. Even most computer techs have to find a way to even allow the computer to let them get into the registry to find the malware. You can remove MacDefender and variants by simply deleting them, and they're gone. Not to mention that most Windows malware downloads and INSTALLS by itself, which is still something that this MacDefender BS cannot do.

THIS IS NOT A VIRUS (had to bold for any ignorant person still thinking that this is a virus for some reason)

 

[AppleScruff1]

So are we going to get weekly coverage of every piece of malware that pops up which 99.99999% of Mac users will never see?

Is this the best these people can do? Trojans?

If it was so trivial and uncommon, then why did Apple issue a fix?

 

[8767092]

I clicked a link to a story on slashdot.org but the url was hijacked and this nasty thing started multiple simultaneous downloads to my iMac instantly. The files were small zip archives, and 2.5 copies were downloaded and one had unzipped before I could cancel the download!

I jumped to the downloads folder to kill anything that I could find...

I was pleasantly surprised that Sophos Antivirus (Free) for Mac detected the threat immediately and thew up a warning window pointing out the paths to the malware files. Sophos could not automatically remove the files, but it did point me to the exact files which had been downloaded and instructed me to manually remove the files.

No connection with Sophos other than I run their software, and obviously, I am glad that I do!

You fail for two reasons, sir.

1) You are browsing with the default options in Safari.

2) You are using an antivirus on a Mac to protect yourself from 1.

The key here is a setting in Safari that Apple hasn't changed after years of howling about poor design decisions. It isn't a low level system problem, but a high level problem that should never have been a problem in the first place.

Don't believe me?

Internet Explorer doesn't download and open "safe" files by default for this reason. 😉

 

[archipellago]

Your statement assumes that PCs and Macs have equal security out of the box. That's not the case. Macs are inherently more secure out of the box, without all of the hoop-jumping that PC users need to do.

100% wrong.... Google is your friend.

 

[0815]

I clicked a link to a story on slashdot.org but the url was hijacked and this nasty thing started multiple simultaneous downloads to my iMac instantly. The files were small zip archives, and 2.5 copies were downloaded and one had unzipped before I could cancel the download!

I jumped to the downloads folder to kill anything that I could find...

I was pleasantly surprised that Sophos Antivirus (Free) for Mac detected the threat immediately and thew up a warning window pointing out the paths to the malware files. Sophos could not automatically remove the files, but it did point me to the exact files which had been downloaded and instructed me to manually remove the files.

No connection with Sophos other than I run their software, and obviously, I am glad that I do!

Assuming you wouldn't have sophos installed and the installer would have poped up and asked you where to install the application "XYZ" to (an application you never downloaded and never heard of), what would you have done? Select "Machintosh HD" and click through the installer or click "cancel" (or hard reset if you are the really scared type not trusting the cancel) ?

Problem is too many people don't use common sense - sophos might protect people against it after many many others ran into that problem, but there will never be 100% protection against "not thinking". Maybe it is time for better "User Education"? Maybe Apple should make an installer that asks the user if they really downloaded it and from where to verify sources? (well, hopefully not). But the minimum Apple has to do is to turn the stupid "open safe downloads" option off - that is the first thing I do on ever mac I get my hands on.

 

[jettredmont]

Of course. But by default safari opens files upon download. And while you and I may disable that or cancel any installs most people would not. Most people just don't know about or don't understand this stuff.

"Most people"? You have a survey to back up that argument, I assume?

In my experience, the people that fall for this kind of thing are in a fairly narrow band: they know enough about the OS and computers in general to not be frightened by an installer popping up out of the blue, but not enough to know that installers shouldn't be popping up out of the blue.

I deal with a wide variety of Mac and Windows users (albeit not in a random sampling statistical sense). I have yet to come across one who would click through such an installer. They exist, obviously. But "most" is a horrendous stretch.

 

[Yamcha]

Yeah lets look to microsoft to see how it is done.

Lets compare:
Windows 7 vulnerable to 8 out of 10 viruses

And this one piece of malware discussed here is one out of millions of pieces of malware.

Frankly I do not see purchasing a windows machine as an intelligent choice at all. But fanboys will be fanboys.

I disagree, me being an advanced PC user, I've never encountered any issues with Windows, thats because I took the necessary precautions, the vast majority of people are not aware how to avoid viruses/spyware/malware, or even how to remove and deal with them..

I don't think its fair for you to say purchasing a Windows machine is not a intelligent choice, now I assume your like the vast majority of users who aren't very computer savvy and do experience crashes, viruses etc, but do not know how to deal with them..

What I find hilarious is that people often blame Windows, but fact of the matter is, its the users that cause all these issues, when you do a clean install of Windows, you'll find that it performs perfectly, but over the months and years you see performance degradation, do you think that happens on its own? no way, its because of the user..

Conclusion is if you know what your doing with regards to computers then you will have little or no issues with Windows..

And again I'm no fanboy, I actually prefer Mac OSX over Windows any day, infact I don't even use Windows anymore, unless I game.. so I'm not here taking sides, I'm just shedding light on the truth of the matter, you cannot blame Windows for the ignorance of the users..

 

[ten-oak-druid]

Those weren't viruses. They were trojans and malware. As in Windows didnt stop a program from being installed, just like OS X here.

Yes but the people proclaiming "its over" for apple users don't agree. I'm using their rules.