OS X flashback.A - Malware Targetting Mac OS X Lion

Mac malware?? Not again!!

If you are thinking the names like Malware, virus, Trojan horses is only made for windows then stop you need to think again!  In a single year, intruders target Mac world twice.  First time (Read about  Mac Defender) they tried to hack your credit card information and this time they are trying to get unique ID of your Mac! HOW? Just recall for a second have you installed Adobe flash in recently? If yes read every single line written here:-

(Image Credit: Appleinsider.com)

This first screen of malware appears exactly similar to Adobe flash player. It is reported to present in malicious websites which on landing invites users to install flash player telling that some content present at the page need flash player. Since it is known to everyone that flash player is not pre-installed in Mac OS X Lion that user need to install manually. So chances are very bright to  get click from user. Giving no room to think, intruders made its interface exactly similar to the original adobe flash player including design & logo. This name of malware is – OS X/flashback.A!

Soon after downloading, a installer will appears and it proceed to disable network security first. It install a DLL (dynamic link library) & an auto launch code which allow to inject code the applications launched by the user.  As soon as user launch the application this code start connection with remote server and whole information provided by the user to that application would send to remote server. Just imagine if user has launched that application to pay credit card bill,  what this “OSX/flashback.A” is going to do? Right, it will send whole information to the remote server. Not only single application whenever you launch any application this script would send whole information.

How to prevent your Mac from Malware

Handle All File Manually: Apple provide some options in Safari such as it always considers all file as safe. So it automatically open those files. But unfortunately, all files are not safe. So set the following permission as follows:

• Launch Safari
• Select preferences->General
• Uncheck the Open 'safe' files after downloading" box

This will ask you every time before downloading any file. DO NOT ALLOW ANY UNKNOWN APPLICATION access your Mac.

Install Application from trusted source only: Make this habit of installing application from trusted source or directly from official website.

Check Whether Your Mac is infected or not:

If you have downloaded Adobe flash player recently, check whether you are infected or not by looking for file “~/Library/Preferences/Preferences.dylib"

Hang on!! Fake Application are Rounding on the Web

If you are among them who are thinking malware, virus, trojan horse are the words are only made for windows users, just hang on!! “Apple Warns Users About Mac Defender, Promises Patch” Frobes says...

Previously, hacking was very common pratice in windows. We, the Mac users are less in numbers enjoying our previously malware free Mac world. But now, someone started target our happy mac family. With the starting of May the news about the Mac Malware: Mac Defender started floating on the web. Though it is not the first time when mac machines are targeted but Mac malware this time is more powerful with official look & interface, name and pop ups...

Mac malware is not actually made to harm any Mac data but their intensions are much more harmful than this! They are sent to your Mac to get the personal information as credit card details from you!

The “defender attack” will display message saying that your machine has been infected by series of viruses which only “Mac Defender” can remove.

(Credit:new.cnet.com)

 When you click on register it will ask some information about your credit card etc. And this is what they wanted from you to do. No one can identify it in first look because of it similar name some of the popular names are: Mac Security Center, Mac Protector etc. And its interface (as shown above) look like truly Mac application but fact we know is they are intruders. 

How to save your Mac from them:

These malware reported to targeting Safari browser. Make sure safari could not download any file from web without your permission. For doing so follow the following steps:

Disable auto-handling of files: Apple provide some options in Safari such as it always considers all file as safe. So it automatically open those files. But unfortunately, all files are not safe. So set the following permission as follows:

• Launch Safari
• Select preferences->General
• Uncheck the Open 'safe' files after downloading" box

This will ask you every time before downloading any file. DO NOT ALLOW ANY UNKNOWN APPLICATION access your Mac.

Install programs or Applications Manually: In addition to this check other web based programs such as mail clients, chat programs etc for automatic file handling and if this feature enabled there just disable it.

Install Reputed Malware Scanners & Mac Optimizing Utilities: Malware scanner protect life of your Mac (external attack) and Mac optimising utilities makes your Mac perform 100%. So both are equally important for your Mac smooth performance. There are n number of malware scanners present on the web. Some of the tested malware scanners are: Avast, Norton, McAfee, Kaspersky etc etc.. Most of them provide scanner free for home use. In the same way a fine line of Mac optimizing utilities are present on the web leave the web your Mac itself have “disk utility” that can handle most of optimisation issues. One of the reputed  third party utility is: Stellar drive toolbox.

Monitor Downloads folders Regularly: Know where your program files are stored on your Mac. Scan those files regularly to minimize the possibility of unknown file downloaded there without your permission.

Discussion so far can make your Mac stronger against any unwanted threats but it doesn't means that no threat can attack your Mac! So be prepare to save your data, it is always good idea to take proper back of your data time to time.