Guest Post – Mac Threats Are On The Rise

In the past, Mac devices have largely been out of cybercriminals’ crosshairs. While hackers occasionally launched malware attacks against Mac machines, they targeted Windows devices much more often. But this is no longer the case.

For the first time, cyberthreats targeting Mac devices have outpaced those targeting Windows machines. In 2018, there was an average of 4.8 threats detected per Mac endpoint. In 2019, the average soared to 11 threats per Mac endpoint — almost double the average of 5.8 threats per Windows endpoint, according to Malwarebytes Labs’ “2020 State of Malware Report“.

This dramatic increase in threats is partly due to the fact that Mac’s market share increased in 2019. The more popular a software program becomes, the more attractive it is to cybercriminals. Another factor attributing to the rise in threats is Apple’s failure to adequately deal with adware and potentially unwanted programs (PUPs). Apple has not cracked down on adware and PUPs to the same degree it has cracked down on other types of malware, according to the “2020 State of Malware Report”. This has left the door open for these programs to infiltrate Mac devices.

Adware and PUPs Are Mac’s Achilles Heel

Adware and PUPs are the main types of malware seen on Mac devices. Adware is the name given to hidden programs that display ads. These programs sometimes perform other malicious actions, such as redirecting search requests to advertising websites, covertly monitoring a user’s online behavior, and changing a web browser’s homepage without the user’s permission. Adware typically gets on devices when people download freeware or shareware. It can also be installed when someone visits an infected website.

PUPs are programs that people do not want, despite the fact that they consented to their installation. They are often bundled with applications that the users actually want. For example, a desired app might include an unrelated web browser toolbar or trial software for a different program. Information about the PUPs being installed is often hidden in long license agreements, or it is briefly mentioned when the desired software is being installed.

Once installed, PUPs commonly display popup ads or dialog boxes trying to get users to perform an action, such as purchasing the program promoted by the trial software. Besides being annoying, PUPs can lead to other problems, such as applications freezing. They also take up valuable disk space.

According to the “2020 State of Malware Report”, a family of adware referred to as NewTab and a family of PUPs known as PCVARK are the top two threats to Mac devices. NewTab redirects web searches to specific sites to generate illicit ad revenue. The adware is typically spread through fake flight-tracking, package-tracking, and online-mapping web pages. PCVARK programs are supposedly system optimizers for MacOS systems. These PUPs try to convince users that their Mac devices have problems that can only be resolved by purchasing the software.

Both NewTab and PCVARK were detected on Mac machines more than 25 million times in 2019. These two threats were even high up on Malwarebytes Labs’ overall threat list, which looks at threats across all platforms. NewTab and PCVARK were in the No. 2 and No. 3 spots, respectively. This is the first time Mac threats were near the top of this list.

What You Can Do to Protect Your Mac Devices

Although adware and PUPs are not considered as dangerous as more traditional types of malware (e.g., ransomware), they can be detrimental. Besides being annoying, they can slow down your device, collect personal information about you, consume your machine’s resources, and more. As a result, it is a good idea to try to prevent adware and PUPs from getting on your device. Here are some actions you might consider taking:

  • Install apps from only trusted sites, such as Apple’s App Store.
  • Research an app before you install it, even if you are downloading it from the App Store. For example, read reviews of the app to see if anyone mentions having any suspicious experiences after installing it.
  • Read through licensing agreements carefully to make sure PUPs are not included.
  • Do not blindly accept a “standard”, “express”, or “default” installation, as it might include PUPs. Take the time to read through the install wizard’s instructions and notes.
  • Avoid visiting questionable websites. They might install adware on your Mac device.
  • Use security software. It can find and remove adware and PUPs that have snuck on to your machine. In some cases, it can even prevent their installation.
  • Resist the urge to enable web content that has been blocked by your security software or web browser.

If you think that your Mac device might already have adware or a PUP on it, we can investigate and remove it if found.


Today’s guest post is by a friend and professional peer of mine, Tony Chiappetta, owner of CHIPS.

CHIPS is a Technology Success Provider located in Shoreview, MN near the intersection of Highway 96 and Lexington.  Since 2001, CHIPS has been working with businesses to help them get the most from their technology investment.

Tony has been around technology all his life and holds numerous industry certifications.  With the completion of both a Law Enforcement and a Business Management Degree, Tony brings a business perspective to the technology landscape.  This has allowed CHIPS to lead the industry by bringing enterprise solutions down to the Small Business sector.

CHIPS has received many industry awards and accredations however, Tony is most proud that his team has been asked to help secure the Critical Infrastructure of the Twin Cities by bringing to market a proven technology that was previously only available to Federal Government Agencies.

You can follow CHIPS via Social Media and stay connected with their blogToday’s article can be found here.

0

About the Author:

I am a cybersecurity and IT instructor, cybersecurity analyst, pen-tester, trainer, and speaker. I am an owner of the WyzCo Group Inc. In addition to consulting on security products and services, I also conduct security audits, compliance audits, vulnerability assessments and penetration tests. I also teach Cybersecurity Awareness Training classes. I work as an information technology and cybersecurity instructor for several training and certification organizations. I have worked in corporate, military, government, and workforce development training environments I am a frequent speaker at professional conferences such as the Minnesota Bloggers Conference, Secure360 Security Conference in 2016, 2017, 2018, 2019, the (ISC)2 World Congress 2016, and the ISSA International Conference 2017, and many local community organizations, including Chambers of Commerce, SCORE, and several school districts. I have been blogging on cybersecurity since 2006 at http://wyzguyscybersecurity.com

Add a Comment


This site uses Akismet to reduce spam. Learn how your comment data is processed.