Macs Increasingly Targeted by Viruses

It's a common refrain dashed off in response whenever anyone writes about the sorry state of PC security. In fact, you've probably seen it countless times on this blog alone: Get a Mac!

Well, the times they are a changin'. As the Macintosh becomes more popular with users, the inevitable has begun: Macs are increasingly being targeted by malware creators, as the sheer size of that pool becomes more and more tempting.

While Macs may be somewhat better inherently at fending off malware, the real reason they've gotten a free ride for all these years is that malware creators have largely ignored the platform because it's been just too small to bother with. The Windows platform has been simply too tempting.

Now, here comes something called DNSChanger or RSPlug.A, a fake video codec now riding along with downloadable web video (primarily the adult kind) that tricks you into installing it and then hijacks your computer. The Trojan Horse is not a mere "proof of concept" like some past Mac viruses, but is one actually out in the wild and in general distribution right now. The user is told that in order to play a certain video, Quicktime needs a codec update and must download and install the software. In reality, it's a virus that can grab full system rights and change DNS settings, opening holes for an outside attacker. A Windows version also exists.

History has largely forgotten the scant few attacks that previously infected Mac OS X. The "Macarena" virus hit in late 2006. Previously that year, a virus widely billed as the "first" for OS X, called Leap.A was unleashed. To date, Symantec lists only seven exploits under OS X... but more are certainly on the way.

While it may be paranoia to start panicking about the security of your Mac, it would at least be prudent for Macheads to start using more common sense when it comes to "dangerous" web sites or opening email from strange sources. I wouldn't bother with shelling out for Mac antivirus software just yet, but Macophiles should at least start putting themselves into a security-focused mindset, because this is certainly just the beginning. 

LINK: Mackanapes can now feel the pain of the fake media codec