Criminals set sights on growing army of Mac users

By Liam Tung on 24 January 2008

Tags: apple | cybercrime | mac | malware | os x | security | sophos | threats | trojan | mac users

If Mac users fall for scams that PC users have faced for years, it wont be long before money-hungry crime gangs exploit them, say security experts.

In the world of desktop security, there are two sides to the equation: criminal ambition versus the number of exploitable users on a platform.

Until recently, the relatively small number of Mac users had been kept safe because they were not considered worthy of attention by professional crime gangs.

Want to know more?

For all the latest news, analysis and opinion on Security, click here

While Mac penetration remain relatively low in the enterprise, the increasing popularity of OS X in the consumer market has resulted in crime gangs finally paying attention to the Apple collective, according to security firm, Sophos.

The security challenge for Mac users centres on the development of more intelligent malware-delivery mechanisms, which detect the platform being used by a Web surfer and then deliver an appropriate threat.

One such example, called OSX/RSPlug, was discovered last year. It contained a fake codec that manipulated a Mac's domain name server (DNS) settings to hijack which sites an infected computer could visit, according to Sophos's head of technology, Paul Ducklin.

"We have seen at least 20 different variants for this trojan for Mac. We can't say that ... Macs are the place to be, but it's clear there is a market experiment going on," Ducklin told ZDNet Australia.

A serious threat to all computer systems comes from Web sites that have been planted with malicious code, which exploit flaws in applications such as Internet Explorer, and Apple's Quicktime. Multiple flaws were discovered for each of these applications last year, which opportunistic malware distributors are expected to try and exploit.

According Ducklin, around 6,000 malicious Web pages are created every day -- one every 14 seconds -- of which 83 percent reside on Web sites belonging to legitimate companies and individuals, who are unaware their sites have been compromised.

However, Ducklin said he doesn't want to give the impression that Mac users are doomed by the increasing interest in attacking the Apple platform.

"We've tried to couch our words sensitively in this security report. But it is essential that Mac users stay up to date with attack mechanisms used against PC users.

"What we're saying is that if you actually recognise the dangers and take precautionary measures, cybercriminals will probably take their threats elsewhere. If [Mac users] learn what happened to PC users over the last few years, it maybe an opportunity to poke cybercriminals in the eye by having them write malware for no effect," he added.

Like this article? Click below to send it to your mobile for free!

Be the first to comment on this article!

  • Leave a comment

All fields marked with * are required

What do you think

Your e-mail will not be displayed

You must read and type the 6 chars within 0..9 and A..F

You must read and type the 6 chars.


  • Norton AntiVirus 2009

  • Hacker talks fooling e-passport systems

  • Best free Windows Mobile software

  • Trend Micro PC-cillin Internet Security 2009

  • Norton Internet Security 2009: Photos

  • Trend Micro Internet Security 2009 Pro: Photos

  • 101 software tips, tweaks and tricks

  • Don't buy stand-alone antivirus: Trend Micro

  • Norton Internet Security 2009

More articles »

Find the right software

Brand
  • Multiple options can be selected

    • Norton AntiVirus 2009

      Norton AntiVirus 2009

      Norton AntiVirus 2009 hits all the right security notes, and its superior protection technologies might even win back some jaded anti-Symantec folks, though for some, technical support may continue to frustrate.

    • Trend Micro PC-cillin Internet Security 2009

      Trend Micro PC-cillin Internet Security 2009

      You can't beat the price. For a good, basic internet security suite, we recommend Trend Micro Internet Security 2009.

    • Norton Internet Security 2009

      Norton Internet Security 2009

      Norton Internet Security 2009 hits all the right security notes and its superior protection technologies might even win back some jaded anti-Symantec folks, though the lack of adequate technical support may continue to frustrate.

    • Spyware Terminator

      Spyware Terminator

      This spyware scanner and removal tool does the job, but enabling some functions may cause slight slowdowns and it has a few bugs in Vista.

    • ZoneAlarm Internet Security Suite 2009

      ZoneAlarm Internet Security Suite 2009

      ZoneAlarm Internet Security 2009 provides top-notch security protection that is light on system resources, allowing you to work unencumbered.

    More reviews »

    Membership benefits

    Create wishlists

    Create wishlists

    See a product on CNET.com.au that you want? Add it to your wishlist and send a hint to your friends and family. Sign up for a free CNET.com.au membership now!