Apple to release Flashback removal software, working to take down botnet

[DainBramaged]

Apple plans to release software that will detect and remove Flashback malware infections on the Mac, the company announced Tuesday. In a knowledge base link published late in the day, Apple explained that it's aware of the infection—which takes advantage of a previously unpatched Java vulnerability—saying that the software was coming, but no specific release date was given.

In addition to the Flashback detection software, Apple said that it's "working with ISPs worldwide" to disable the botnet's command and control (C&C) servers. Kaspersky researcher Kurt Baumgartner told Forbes earlier on Tuesday that "Apple is taking appropriate action by working with the larger Internet security community to shut down the Flashfake C2 domains," and Apple's latest efforts seem to coincide with Baumgartner's statement.

"Apple is developing software that will detect and remove the Flashback malware," Apple wrote. "In addition to the Java vulnerability, the Flashback malware relies on computer servers hosted by the malware authors to perform many of its critical functions. Apple is working with ISPs worldwide to disable this command and control network."

We have been covering the Mac Flashback trojan since 2011, but the malware recently picked up steam. Last week, Russian security firm Dr. Web reported that it had infected more than half a million Macs worldwide. (The aforelinked Forbes report claimed Apple tried to take down Dr. Web's sinkhole server for Flashback, but it seems most likely that this was an accidental inclusion in Apple's attempts to take down the botnet's C&Cs.)

http://arstechnica.com/apple/news/2012/04/apple-to-rele...

[Leopolds Ghost]

1. First I've heard of a major Mac virus, but it's to be expected

Now that Mac is becoming a monolithic major corporate entity that's churning out Intel based computers that are functionally similar to PC.

I've never run a malware scan on my mac. What's the best program to use and where's a trusted site to get it?

[DainBramaged]

2. Mac's are still only 5% of the PC population, the crackers must be getting bored,,

[KoKo]

3. Malwarebytes has been recommended by DU'ers and by the

techie guy who works on our business computers. CNET has a review and a download there.

http://www.cnet.com/topic-software/malwarebytes.html


It did miss a Rootkit nasty that I had on home computer, though, recently. However it saved me a couple of times from Re-directs and other Rootkits in the past. Have used it for around three years..I use the freeware version.

Don't know if it works with Mac, though.