Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Although Mac users tend to scoff at Trojans, believing them to be easy to avoid, this is not always the case.

This makes no sense to me.

1. Adobe Flash is rarely required anymore.

2. If you are in a circumstance where, unfortunately, you must use Adobe Flash then go to www.adobe.com and download it.

No trojans involved in either option above. Someone downloading Adobe Flash from www.AnywhereOtherThanAdobe.com deserves more than a trojan IMHO :)
 
Apparently nobody here has a parent with a Mac who his constantly being phished and hunted by these types of scams.
My father had an iMac. He wasn't an Administrator, Gatekeeper was properly configured, it didn't have Flash or Java installed, his computer had Sophos Home installed on it and I had remote access. In 10 years he was never infected with malware.
[doublepost=1494034137][/doublepost]
Where did you get it?
https://www.google.com/search?client=safari&rls=en&q=malwarebytes+mac&ie=UTF-8&oe=UTF-8
 
Mistake number one: installing Adobe Flash to begin with.
So you don't want me to watch any videos that aren't on YouTube? Even YouTube runs a lot more efficiently with Flash. It's a crappy technology, but the alternatives are either slower or haven't been adopted fully.
[doublepost=1494036230][/doublepost]
So I've talked to people about this in the past, but I wonder how much of an issue this malware would be if PowerPC was still around. I wonder how much trouble it would have been to port to a RISC architecture.
Not any harder unless they're writing these trojans in assembly language or something. I used to write everything in C and still didn't know or care what RISC was.
[doublepost=1494036431][/doublepost]
Apparently nobody here has a parent with a Mac who his constantly being phished and hunted by these types of scams.
IDK, my tech-illiterate grandma has been fine with her Mac for the past 4 years. Nothing third-party installed except Flash and Chrome. And her old Windows PC had tons of crap, including literally 4 Yahoo! toolbars somehow.
[doublepost=1494036584][/doublepost]
Until there's a compromised version of Malwarebytes. :p
You mean the original? :p
 
Last edited:
It's not hyperbole. It's just incorrect. Go to the BBC News or CNN or any other big news site, and see how many videos require Flash. Strangely, many of them use HTML5 if you change your user agent to iPad or something, so IDK why they keep the Flash version on the desktop site.

And no, YouTube is not faster with HTML5 on a modern computer with a modern browser. It's still garbage. I can't believe it's even slower than Flash. This is why I use an extension to load it with QuickTime instead.
 
I think it's important to recognize that what's best and what's necessary are two different things. It would be best to not have to run Flash, but it's necessary for you.

Is your industry adapting, though? Because Flash is dying, and you wouldn't want your income to go with it.

You are so ignorant to other peoples lives. Flash is used constantly by online classes and professional development sites. If I want to keep my license I have to have flash, period. No whats best. Its literally not possible for me to keep my license without it.
 
You are so ignorant to other peoples lives. Flash is used constantly by online classes and professional development sites. If I want to keep my license I have to have flash, period. No whats best. Its literally not possible for me to keep my license without it.
Find a new line of work bro
 
Apple should take a page out of Microsoft's book and lock down macOS to be App Store only like Windows 10 S.

/s

the locked down version of macOS is iOS. Windows 10 S is just like Windows RT all over again. And Windows RT is a failure.

if we look at the Mac App Store, it is only slightly better than Windows App Store.
 
People still installing Flash?

giphy.gif

That's what I was going to say? who does that anymore? Ever since most of the forums got rid of flash, and youtube ported over, that's that!
 
  • Like
Reactions: dschulian
Mistake number one: installing Adobe Flash to begin with.
Sure. However most corporations have training modules or other internal websites that are older and Flash-based. So it becomes an IT problem in these instances, but still annoying to be down for any length of time while at work.
 
There is a simple solution to this.

ONLY UPDATE FLASHPLAYER THROUGH THE SYSTEM PREFERENCES NO MATTER WHAT ANY WEBSITE TELLS YOU TO DO.

Many websites have FAKE Flashplyer update warnings. Just ignore them and trust Apple on this one and you will not ever get this. Never trust websites, even some legitimate ones.

As for needing Flash, most sports streaming websites use it, so unless you want to live in a cabin like the Unabomber, just deal with it wisely and carefully.

That doesn't mean you can't continue to hate it, but guess what? It's not dead, yet.
 
Apparently nobody here has a parent with a Mac who his constantly being phished and hunted by these types of scams.
Put them on a non admin account and don't give them the admin password.

Change their dns to 208.67.222.123 and 208.67.220.220 the child safe opendns. Haha
 
Apple should take a page out of Microsoft's book and lock down macOS to be App Store only like Windows 10 S.

/s
I am pretty sure Apple would love to do that.
But I am also sure that Apple is aware that many users would love to shoot down the company if they did...
 
If the answer to this disease is to use Google Chrome ..... we're in deep do-do!
I agree. When I am forced to use chrome, I only ever use it in a sandboxed VM which I can blow away after using. I will NOT have google infecting my Mac's hard drive. Also google's policy's on how they accrue data and what they do it is highly questionable.

My Mac is proudly google free. Well apart from the occassional sandboxed VM for chrome which I can blow away after to make sure my Mac stays safe.
 



Well-known Windows backdoor malware "Snake" has been ported to the Mac for the first time, according to MalwareBytes. Described as "highly-sophisticated," Snake (also called Turla and Uroburos) has been infecting Windows systems since 2008 and was ported to Linux systems in 2014 before making its way to the Mac.

The Snake malware was found earlier this week in an installer masquerading as Adobe Flash Player, buried inside a file named "Install Adobe Flash Player.app.zip." It is designed to look like a legitimate Adobe Flash installer, but is signed by an illegitimate certificate.

snakemalwareinstaller.jpg

It does, actually, install Adobe Flash Player, but it is accompanied by additional software that is malicious and designed to provide a backdoor into the Mac. The malicious files are well hidden in the /Library/Scripts/ folder and disguised as an Adobe launch process.Apple already revoked the certificate that the Snake malware was using to infect Mac machines, but another iteration could pop up, so Mac users should be aware of the possibility.

Those infected by Snake are vulnerable to having data stolen, including login information, passwords, and unencrypted files.

To avoid malicious software, Apple recommends downloading content only from the Mac App Store or from trusted developers.

Article Link: Windows 'Snake' Malware Ported to Mac, Imitates Adobe Flash Player Installer
Should I scan my Macbook because I already install flash
 
It's not hyperbole. It's just incorrect. Go to the BBC News or CNN or any other big news site, and see how many videos require Flash. Strangely, many of them use HTML5 if you change your user agent to iPad or something, so IDK why they keep the Flash version on the desktop site.

And no, YouTube is not faster with HTML5 on a modern computer with a modern browser. It's still garbage. I can't believe it's even slower than Flash. This is why I use an extension to load it with QuickTime instead.

Man, is your computer that old? YouTube replaced Flash with HTML5 as default in 2015.
 
For those that are saying flash in itself is a problem...

If the plugin is disabled in Safari by default and only enabled for say 1 safe website (or even click to enable flash) then surely there is little to no issue especially when you use common sense?

I realise this is a different topic to the Trojan using Flash installer as a cover.
 
For all of those saying it's dumb to install flash, I have to for my homework and online classes for my university. I'd love to give it up, but some of us just don't have the option to.
I would flat out bet money that those saying it’s dumb to install flash, hear your argument every single time this subject comes up but will still go ahead and tell you that you’re stupid.
 
Man, is your computer that old? YouTube replaced Flash with HTML5 as default in 2015.
I use the computers in my signature. One is new, and the other is old but more capable. The HTML5 player just sucks. No, it doesn't lag, but it uses more resources, which is frustrating when everyone keeps claiming HTML5 implementations are so fast and magical.
[doublepost=1494065700][/doublepost]
No, this has very little to do with Flash, if you installed Flash from Adobe's site (Link) or Updated directly from Adobe then there is no problem.
Didn't some versions of the official installer try to bundle in some semi-malware like Yahoo! stuff that you'd accidentally agree to install? Or am I thinking of Java?
[doublepost=1494065791][/doublepost]
For those that are saying flash in itself is a problem...

If the plugin is disabled in Safari by default and only enabled for say 1 safe website (or even click to enable flash) then surely there is little to no issue especially when you use common sense?

I realise this is a different topic to the Trojan using Flash installer as a cover.
Yes, I just never update my Flash and manually enable it when I need it, which is rarely. I don't want to have to keep updating it, and I don't want Adobe's autoupdate s***ware running. Adobe makes great software, but their update/registration managers are so pesky that I cracked my legally purchased Photoshop just to take it offline.
[doublepost=1494067068][/doublepost]
I think it's important to recognize that what's best and what's necessary are two different things. It would be best to not have to run Flash, but it's necessary for you.

Is your industry adapting, though? Because Flash is dying, and you wouldn't want your income to go with it.
Is it that big of a deal to make employees install Flash? Of course you shouldn't make the customer use it, but that's a different story. You know, not everyone is a tech fanatic.
 
Last edited:
Wow, the last time I used flash was on my G5 before I removed it.
I always laugh now when I visit a web site and it shows that adobe flash plugin message. That's so 2006 like my G5.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.