Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
When you open the app, does it ask for administrator password?

Seems like a well designed malware.

Yeah. Do they manage to circumvent that? Otherwise it's not really noteworthy. Everyone can make a script that installs some other scripts if they have root privileges from the user.
 
The fact that MacUpdate send you their updater App NOT the file you asked for killed MacUpdate for me.
ANY system that does this is a malware site and can no longer be trusted.

If you are forced to use MacUpdate, ALWAY click the link to download from the developers site so MacUpdate can not try to install their software.

If you register as a free user, the download links on MU pages will provide you normal App files. I don't know why they designed their service like this.
 
Some unsophisticated downloaders are sure to be taken in by this. Just make sure you trust the developer and the source and you're usually fine. I sideload things on my Macs on a regular basis. It's pretty easy to discern what's trustworthy and what's not.

The danger is that a legit site gets hacked, and their usually legit distros get replaced by something containing these viruses. Stay vigilant.
 
I didn't really have the infected app, but downloaded Malwarebytes just to be sure to check on other stuff..
And sure enough it found something called Spigot, had it deleted right away.

Should I have some other apps to secure my Mac? Any recommendations?
 
Bless those who are able to survive by using only app store programs on their Macbooks and iMacs.

But some of us have to use 3rd party programs because the app store is lacking of a lot of programs.

I find it hilarious some folks are blaming people for having 3rd party apps.

It's like someone getting mugged and you tell them " Well you should have stayed in the house. Your house offers protection. But because you went outside you therefore deserved to be mugged "
 
Last edited:
If people in Cupertino did their job right, Xprotect would have been updated WAY before MacRumors brought up the headline...
 
  • Like
Reactions: Morod
Yeah, impossible if you're a developer.
It's impossible no matter what.... I mean VLC, Handbrake, Any pro app that is non Apple , any browser that is non Apple...even Office ....is outside the store..
 
Ars shed some light:

http://arstechnica.com/security/2016/07/after-hiatus-in-the-wild-mac-backdoors-are-suddenly-back/

When double clicked, EasyDoc silently installs a backdoor that provides remote access to a Mac's file system and webcam, making it possible for attackers to download files, install new apps, and watch users who are in front of an infected machine.
I have the impression it does not ask for administrator password.

Interestingly, Eleanor won't install itself if it detects a Mac is running Little Snitch, an application firewall that can monitor and control applications' access to the Internet, researchers from fellow antivirus provider Malwarebytes...
Little Snitch is the FIRST app I install in OS X.

Looks like Malwarebytes Anti-Malware is a great app to protect your Mac too after something bad happens.
 
A trusted source can easily become an un-trusted source.. after it gets infected..

TrasmittionBT was a good example... Although we still download from the site, we now we have no idea if it will happen again.

It's more easier to "trust" a site that has *never* been infected.

My mate can't understand the difference either, so u'r not alone :)
 
The fact that MacUpdate send you their updater App NOT the file you asked for killed MacUpdate for me.
ANY system that does this is a malware site and can no longer be trusted.

If you are forced to use MacUpdate, ALWAY click the link to download from the developers site so MacUpdate can not try to install their software.


Sadly, Macupdate is not to be trusted anymore. sure - go to the developer's site, but macupdate, hmmm, not anymore - they sold out.
 
Should I have some other apps to secure my Mac? Any recommendations?
Here is some useful information: Mac Hardening Guide (some of the stuff there is not relevant for 10.11 but you get an idea)

Apart from that knowledge and understanding of information security is probably the best safe guard. Little Snitch as mentioned above is a very valuable tool.

[doublepost=1467969632][/doublepost]And another one, keydnap. Thread here: (Security) Keydnap malware is hungry for credentials
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.