There’s a new Mac virus out there that could be infecting up to 1% of all Macs. The virus is a trojan called Flashback that tricks users into installing it by masquerading as an installer for Adobe Flash. The latest iteration of the virus is a bit more rude though: it uses an unpatched Java vulnerability to install itself whenever a user visits a compromised website.
Macworld has a pretty good article detailing the virus here. Once you’re infected, Flashback harvests your internet browsing information, which includes username and passwords and sends it back to its evil overlords.
If you want to check if you’re infected, F-Secure has detailed instructions on how to detect and remove the virus on their website here. Caution: some tinkering about the Terminal required.
With Macs getting more ubiquitous these days, its not surprising that Macs are becoming a target for malicious coders. Be vigilant: just as you don’t allow any stranger from entering your house, treat your Mac the same way too. Always keep your software updated, make sure your software isn’t from dodgy sources, and don’t enter your admin password when your system prompts you unless you have a darn good reason for doing so.
Update 11.04.12: Apple has issued a statement saying that they’re working on a patch in addition to working with ISPs worldwide to shut down Flashback’s command and control network. Apple recommends disabling Java in the meantime.
Update 12.04.12: Apple’s released a security update for Java that removes the common strains of the Flashback virus. Check your software updates.




