But the software they install is actually the fake antivirus program. On the Mac, there's a pop-up window that looks like a security warning. When victims click to 'fix' the security problems. Your macOS might stop some malware variants, but it can’t help you if you’re already infected. Our antivirus for Mac not only blocks viruses, spyware, Trojans, and other malware in real-time, it also scans your entire Mac for already-hidden threats. See all anti-malware features.
Security firm Intego announced Monday that a fake antivirus program for Mac OS X has been discovered in the wild. While the threat potential remains low, inexperienced users could be fooled into paying to remove fake viruses 'detected' by the software, and in the process, could end up giving credit card information to scammers.
The fake antivirus software calls itself 'MAC Defender,' perhaps the first hint that it should not be trusted (Apple makes 'Macs,' not 'MACs'). Those behind the malware used SEO poisoning to make links to the software show up at the top of search results in Google and other search engines. Clicking the links that show up in search results brings up a fake Windows screen that tells the user a virus has been 'detected,' another clue that something is fishy. JavaScript code then automatically downloads a zipped installer for MAC Defender.
If the 'Open 'safe' files after downloading' option is turned on in Safari, the installer will be unzipped and run. Since the installer requires a user password, it won't install without user interaction. However, inexperienced users may be fooled into thinking the software is legitimate.
Intego notes that the application is visually well designed and doesn't have numerous misspellings or other errors common to such malware on Windows, though it does seem to contain some sketchy grammar. The software will periodically display Growl alerts that various fake malware has been detected, and also periodically opens porn websites in the default browser, perhaps leading a user to believe the detected malware 'threats' are real. Users are then directed to an insecure website to pay for a license and 'clean' the malware infections. However, buying the license merely stops the fake alerts from popping up, but your money and credit card info is now in the hands of hackers.
Mac Fake Antivirus Call Software Installed Windows 10
While MAC Defender wouldn't likely fool an experienced user, Intego notes that its appearance in the wild is yet another opportunity to detail some useful security precautions. Don't let your browser automatically open downloads. If your browser asks if you want to run an installer even though you didn't try to download one, click 'cancel.' And never give your password to run installers you aren't 100 percent sure about.