Are Popular Mac Apps Rendering Your Computer Unsafe?

Could you be rendering your Mac vulnerable to cyberattacks, just by running several popular applications? That’s the contention being made by security researchers, according to a recent report from Ars Technica. The report highlights popular BitTorrent downloading program uTorrent and screen-cropping video software Camtasia among “a large number of Mac apps” that are likely putting users in danger.

A Man-in-the-Middle Attack

So what’s the problem? According to the Ars Technica report, the danger here is what is called a “man-in-the-middle attack.” In this type of attack, a hacker hijacks a …

Has Hacking Team Returned? New Mac Malware Suggests As Much

Last year, the spyware developer Hacking Team seemed to go down in flames after a massive internal leak exposed the company’s dirty secrets for the world to see. Prior to that occurrence, the Milan-based firm had been in operation since 2003, selling products to governments, law enforcement, corporations, and other entities to help them spy on customers or private citizens. From monitoring emails to breaking encrypted communications, all the way to covertly activating webcams, Hacking Team traded in software that gleefully wrecked privacy rights and laundry lists of other …

Researcher Creates Fix for Gatekeeper Problems

Can you count on Gatekeeper, Apple’s proprietary malware blocking tool, to keep your computer safe? The jury is still out on that question, but one researcher has at least done his part to make Gatekeeper a bit more efficient.

Last year, Patrick Wardle of the cybersecurity firm Synack discovered not one but two major security holes in the Gatekeeper tool. He showed how both of those holes could allow a piece of malware to bypass Gatekeeper altogether and infect a Mac computer.

How Gatekeeper Works

To understand how Wardle …

KeRanger Ransomware Takes Macs Ransom for Bitcoin – Ransomware...

BitTorrent Client Exposes Users to First Known Piece of OS X Ransomware

Unlucky BitTorrent users who installed the latest version of Transmission over the weekend unwittingly exposed themselves to the first known piece of ransomware seen in the wild for OS X. According to a report published on March 4th by the Palo Alto Networks Research Center, hackers figured out a way to bundle ransomware with two different installers for Transmission 2.90. Transmission bills itself as a “fast, easy, and free BitTorrent client.”

According to the Palo Alto Networks report, …

Safely Downloading from the Internet

If you are using a Mac (or any computer, for that matter), it’s a concrete fact that you are eventually going to download something from the Internet. Whether it’s a new app from the App Store, a piece of free software from a third-party source, a movie or TV show, a song or album, an eBook, or even just an email attachment, the act of downloading and uploading files is something that most of us do every single day.

But how can you be safe about downloading from …

Apple vs. Android: Who Wins in the Security Battle?

In a recent opinion piece for The Guardian, writer and technology professor John Naughton wrote about the ongoing war between Apple and Android for total dominance of the smartphone marketplace. The piece, titled “Security is the loser in the holy war between Android and Apple,” looked at how the battle between the iOS and Android operating systems has led to a marketplace where many smartphone owners are using phones that, in his words, “are riddled with security holes.”

While the title of Naughton’s article seems to suggest that the …

Why Protecting Your Child’s Identity Online Is Important

Parents raising kids today are at a disadvantage. Thanks to the internet and the advent of countless other digital and networking technologies, modern parents have to deal with challenges and dangers that their parents never had to deal with. Worse, many of these dangers are not often discussed in the public eye. Sure, we’ve all read a fair amount about cybercrime and online predators, but those threats are not the only ones that your kids are facing on the web.

The Child Identity Theft Problem

On the contrary, an equally …

Apple Updates to Patch Security Flaws for iOS and OS X

Apple’s latest mobile and desktop operating systems, iOS 9 and OS X El Capitan, launched in the second half of September. As of October 22nd, Apple has released updates for both operating systems to patch notable security flaws. The updates, iOS 9.1 and OS X 10.11.1, are essential for users who have updated their Apple devices to the latest operating systems.

According to a report on the updates from eWeek, Apple decided to release quick patches for their latest operating systems after third-party sources—including Google’s Project Zero and Yahoo’s Pentest team—identified …

Recovering a Lost or Stolen iPhone

It goes without saying that the sleek, lightweight, and attractive design of the iPhones makes it an ideal smartphone choice for many. Unfortunately, those characteristics also make Apple’s flagship device both easy to lose and a target for theft. The small, light, and slippery design of the iPhone means that it can slip out of your pocket or bag without you immediately realizing it. And since iPhones are expensive, valuable assets, they tend to be the apple of many a potential thief’s eye (pun intended).

The good news is …

MacKeeper URL handler remote code execution vulnerability and proof-of-concept...

Security Advisory update issued: 05/08/2015

MacKeeper has posted an advisory on their blog detailing the security issue and the steps they have taken in response. A new version of MacKeeper has been released to address the vulnerability, and MacKeeper users should update to the latest version as soon as possible. By default, MacKeeper automatically checks for updates, and users should click OK when prompted in order to install the update.

Original advisory follows:

Date issued: 05/07/2015

Risk: Critical (for users running MacKeeper)

A vulnerability has been discovered in MacKeeper, a utility program for OS X. …

OSX/CoinThief Manual Identification and Removal Instructions

Updated: February 12, 2014

OSX/CoinThief has been distributed under four different names so far: BitVanity, StealthBit, Bitcoin Ticker TTM, and Litecoin Ticker.

BitVanity and StealthBit were distributed on Github, while Bitcoin Ticker TTM and Litecoin Ticker were distributed on Download.com and MacUpdate.com. Both app names appear to have been taken from legitimate apps in the Mac App Store. The malicious payload was not found in Mac App Store copies of these apps.

When run, the malware installs a browser extension in Chrome, Safari, and Firefox, which will appear in those apps as "Pop-Up …

CNet Adware Identification and Removal Guide for Mac OS X

The links for many popular Mac apps on CNET’s download.com have been replaced with a “CNET installer” that installs toolbar adware and changes browser settings. This guide shows how to identify affected apps, how to avoid the toolbar installer, how to determine if it has been installed on your system, and how to remove it if so.

Adware can be a threat to user privacy, and is used to track a user’s browsing habits online. For example, the permissions for one of the Google Chrome extensions shows what these toolbars can …

CNET’s Download.com Adware Installer Bundled with Popular Apps –...

Update (10/29/13 12:15pm): SecureMac has prepared a guide to help users identify and remove the adware being distributed by CNET’s download.com in place of popular Mac apps. The guide provides detailed information, including step-by-step instructions to determine if the adware is installed on your system, and the steps to remove it. View CNet Adware Identification and Removal Guide for Mac OS X.

Direct download links for a variety of popular Mac software products have been replaced on CNET’s Download.com with installers for browser toolbars, commonly used by adware to track user …

Avast! Mac Edition Review

Review by Israel Torres

Introduction

avast! Mac Edition is an Antivirus software for Mac. The software offers the following features:

On-Access Scanning
User friendly interface
Automatic updates
Integrated email protection
PowerPC and Intel supported
Simple Installation

This software is not free, however they offer a free 60 day trial version to download from their website. It comes in a variety of subscription flavors starting at 1 Year. It’s also offered with it’s PC version for a discounted rate. (Figure.00)

Note: It is very important to be sure to backup your system with Time Machine or alternative backup software (Carbon Copy …

Sophos Anti-Virus for Mac Home Edition Review

Review: Sophos Anti-Virus for Mac OS X

Posted: November 8th, 2010
Author: Israel Torres

Introduction

Sophos declares the following in their campaign for Sophos Anti-Virus for Mac Home Edition:

Malware myth: Macs can’t get viruses.
SophosLabs have detected over 1,000 threats for Mac OS.

Sophos Anti-Virus for Mac Home Edition runs in the background and scans files for threats whenever your Mac opens them. It comes with an uninstaller (Applications/Remove Sophos) in case you want to remove it after trying it on your system.

I’ll be going through this review step-by-step and cover all the features related to …

PGP 10 WDE for Mac OS X

5.12.10 News
PGP Whole Disk Encryption (WDE) ensures your entire hard disk is encrypted and only accessible by you. Read the whole review of PGP Whole Disk Encryption for Mac OS X.

Trojan Horse Alert: HellRaiser (aka OSX/HellRTS.D)

Trojan Horse Alert: Intego recently alerted users to the presence of a new variant of the HellRaiser Trojan Horse, which they identify as OSX/HellRTS.D. SecureMac has analyzed this new variant and it is detected in the latest MacScan spyware definitions update (Spyware Definitions Version 2010006) as HellRaiser Trojan Horse 4.2. MacScan has detected previous variants of this trojan horse since 2005.

HellRaiser is a trojan horse that allows complete control of a computer by a remote attacker, giving the attacker the ability to transfer files to and from the infected computer, pop up chat messages on the infected system, display pictures, speak messages, and even remotely restart or shut down the infected machine.

The attacker can search through the files on the infected computer, choosing exactly what they want to steal, view the contents of the clipboard, or even watch the user’s actions on the infected computer.

In order to become infected, a user must run the server component of the trojan horse, which can be disguised as an innocent file. The attacker then uses the client component of the trojan horse to take control of the infected system.

Read more about HellRaiser Trojan Horse aka OSX/HellRTS.D

Security Update for Leopard & Snow Leopard

Mac OS X Security Update – Apple posts new security update (2010-003) for Leopard and Snow Leopard. Users may update via the Software Updates System Preferences or by accessing Apple’s download site directly.

This security update addresses ATS (Apple Type Services) handling of embedded fonts. Accessing documents containing malicicously crafted embedded fonts may lead to arbitrary code execution. Charlie Miller is credited for discovery of this threat.