Are Macs vulnerable to viruses?

Thu Mar 13, 2008 1:17PM EDT

See Comments (15)

Yes, we're seeing more and more headlines about viruses, worms, and other types of malware targeting the Mac. But before you start panicking, read on.

For years, it was pretty much a given that Macs were, for all intents and purposes, virus-free. While malware writers were having a field day with Windows, especially in the late 90s/early 2000s (remember the Melissa virus from 1999, or the "ILOVEYOU" worm from 2000, or 2001's "Code Red"?), Macs seemed impervious to infection.

So, what's so special about the Mac OS—or is it just that Windows is riddled with security holes? Well, one could argue about the relative security merits of Macs and PCs all day, but the fact remains that Windows—which still holds a commanding lead over Mac OS X in terms of market share—is simply a more tempting target for hackers.

That said, Macs have been enjoying a boost in popularity over the past few years, and as Chris wrote back in November, malware writers are undeniably starting to eye the Mac OS.

Case in point: OSX.Leap.A, a Trojan horse discovered in February 2006 that looks like a compressed JPEG file; once decompressed, Leap.A tries to install itself into the Mac OS and spread itself over the iChat IM application.

Also worrisome: RSPlug.A, a Trojan from last November that disguises itself as a QuickTime video component. Fire it up, and RSPlug.A will work its way into your Mac's DNS settings, making your system more vulnerable to phishing attacks.

Spooky stuff—but I wouldn't freak out just yet.

While security experts warn that they've been spotting more and more examples of Mac malware in recent months (as many as 150, warns security firm F-Secure), consider this: more than 50,000 Windows viruses (according to some estimates, at least) are currently circulating in the wild.

Indeed, the Mac has yet to be hit with anything approaching the scale of, say, the "ILOVEYOU" worm (which clogged inboxes worldwide).

If you're really paranoid, you can always buy and install antivirus software for the Mac—but personally, I think it's overkill, given the relatively small number of Mac viruses that have been discovered.

Instead, try these easy tips, which should ward off the vast majority of hack attacks:

Don't open suspicious e-mail attachments: Seems obvious, but happens all the time—and it's one of the most popular ways for hackers to gain access to your system. The golden rule: if you get an e-mail attachment from someone you don't know, don't open it.

Don't launch suspicious applications: Most Trojan Horses work their way into your Mac through executable applications. For example, if you're visiting a Web site and you're prompted to install a missing component (a la RSPlug.A), do yourself a favor—don't do it. The latest version of the Mac OS will warn you before installing any new applications; make sure you know what you're installing before you click "OK."

Turn on the firewall: If you're working from your home or office network, your wired or wireless router will keep you reasonably secure from attackers. But if you're using an open Wi-Fi hotspot or any other public network, close off any open ports that might leave your vulnerable to hackers. In Mac OS Leopard, select the Security pane, click the Firewall tab, and select the "Allow only essential services" radio button; then click Advanced and click the Enable Stealth Mode checkbox.

Enable password protection: Believe it or not, your Mac is much more vulnerable to garden-variety thieves than from viruses. Turning on password protection isn't a bullet-proof defense against hackers who are physically at the keyboard, but at least you won't be leaving the door wide open. Go to System Preferences, select the Security pane, click the General tab, and check the "Require password to wake this computer from sleep or screen saver" box.

Comments on Are Macs vulnerable to viruses?

Post a Comment

Join in the discussion. Here you'll see the comments in the order they were posted.

  • 1 Posted by sharon_0730 on Thu Sep 3, 2009 9:17PM EDT Report Abuse

    All of the information is common-sense, but I would still get the anitvirus for a Mac still.

  • 2 Posted by frank.levinson on Thu Sep 3, 2009 4:02PM EDT Report Abuse

    One reason that Macs are less vulnerable to virus is that virus don't spread well with a platform that is only 5% of the installed base. This is just simple math of viral expansion. if you have 90% of installed base then the change of you interacting with a similar host is high, 90% when you send an email or even chat. But when you are 5% then you are likely to email the 90% and your virus will not spread well. Mac owners are not necessarily emailing generally other mac owners. Simple mathematics favors Windows viruses and helps discourage malicious code writers from targeting macs. it is just not efficient and the potential for viral explosion of their code is strongly diminished. Frank Levinson

  • 3 Posted by rogueist on Thu Sep 3, 2009 8:49PM EDT Report Abuse

    Only 0.16% of MACs ever get infected. I like those odds! But a good reason why this number is so low is how the OS was developed. It made it very hard to wedge a virus in there to do damage to the system. Any damage done by most MAC viruses is very specific and easily automatically rectifiable. That is definitely the sign of a GOOD OS.

  • 4 Posted by jayare6895 on Thu Sep 3, 2009 4:29PM EDT Report Abuse

    The vulnerabilities in Windows made it easy for even the simple hackers to enter. "50,000 Windows viruses (according to some estimates, at least) are currently circulating in the wild". I have several security software programs running to protect from intrusion openings that were left in Windows OS. It slows down my system but is necessary. Bill Gates made billions on his sorry-a operating system and now is giving it away by the bushels instead of fixing his product. What a fraud.

  • 5 Posted by dlmartin46 on Thu Sep 3, 2009 3:45PM EDT Report Abuse

    All I can say is that I've owned Macs since 1984 and have NEVER been hacked until last year. I now have the awesome, completely wireless MacBook Air. I have never used Norton or other "anti-virus" rip-offs on my Macs. I have never been hacked on the OS-X side but, wait: I was indeed hacked ONCE when I installed Windoze Vista on a partition on my last PowerBook. I used Boot Camp, and within minutes (I'm not kidding!) a rootkit had been installed on my Windoze partition. So bye-bye Windoze. The only reason I had it was to install my Sony Reader books for travel. I've dumped that pig and have a Kindle on order. It just totally amazes me when people say, "Oh, I can't use OS-X at work." Chances are you're using MS-Office and it is totally transparent on Mac. You don't need to be a slave to M$. Another issue: "I can't play games on a Mac." LOL! What I hear all the time is most Windoze people are only staying with Windoze because the "games aren't there for Mac." That tells me that Windoze people are only using Windoze to play games. Games. Unbelievable. What about stand-alone game consoles? And then get the best OS (and machines) on the planet! Unless all you care about is "playing games." Me, I compute. You, ??? BTW, the last issue with an Apple "bug" (if you will) was a macro in MS-Word...created by Guess Who? Microsoft. In 1997. It just seems to me that all Windoze users care about is gaming. How sad is that? Me, I run my entire household on Macs. Never been hacked, never had to pay for anti-virus software, never had to call Geek Squad. How about you?

  • 6 Posted by bralloeuop08 on Tue Mar 18, 2008 1:57AM EDT Report Abuse

    Due to the fact that Macs are based on Linux schemes such as Darwin, it is impossible for a virus to penetrate their inner workings. It is my own belief that those who make the virus protection suites such as McAffe and Norton are the makers of the viruses that you see. The question that I always ask myself is just how do these companies know the 500,000+ virus definitions if they don't create the viruses themselves. Even with other individuals in the world creating them, it seems impossible for a company to find that many viruses to use for definitions. I own an iMac G3 and a Compaq Presario Laptop and I have never used a virus scan and I am positive that there aren't any infections in my computer.

  • 7 Posted by jchongwc69 on Thu Sep 3, 2009 4:30PM EDT Report Abuse

    Ask any programmers if they can back their name behind their work! There are no such thing as 100% bug free programming, given be it OS or applications. While it may be true that install based for Macs are lower and most hackers or virus creators doesn't even want to bother with it, but that does means it would not happen. Try putting these macs without protection onto the internet and see for yourself. My work involve datacenters and never come across even one macs server. Does anyone know if they are even EAL or common criteria certified?

  • 8 Posted by idiot802@sbcglobal.net on Thu Sep 3, 2009 4:22PM EDT Report Abuse

    i have used windows my whole life and never once been hacked. the only protection i ever used is the free stuff like ccleaner and spybot. my firewall is the windows firewall. my browser is ie 7.0. those that say windows is very vulnerable is full of hot air.

  • 9 Posted by johnfairfield on Thu Sep 3, 2009 4:39PM EDT Report Abuse

    You refer to RSPlugA as a "Trojan" while you refer to the others as Trojan Horse. This is wrong. A Trojan Horse does not contain Trojans. It contains other Greeks who come out of the horse to attack the Trojans.

  • 10 Posted by sandiskboy on Thu Sep 3, 2009 9:03PM EDT Report Abuse

    Macs can't get viruses,,,they can however get trojans and worms. Luckily no one is really bothering to attack my mac. The truth is that Windows because of its design is actually more prone to attack because of the poorly written code and lack of built in security model. The truth is you are more liable to get exploited by other means than viral infection.

More Posts: First Prev 1 2 Next Last

Post a Comment