ie8 fix
madison

Hardware 2.0

Adrian Kingsley-Hughes

F-Secure: 'Mac Market Share x Google Images SEO Poisoning = Gold Rush'

By | June 6, 2011, 2:45am PDT

Summary: Where’s Mac malware headed? F-Secure’s Chief Research Officer Mikko Hypponen and Security Advisor Sean Sullivan share their thoughts.

Where’s Mac malware headed? F-Secure’s Chief Research Officer Mikko Hypponen and Security Advisor Sean Sullivan share their thoughts.

Highlights:

  • Mac usage share of around 15% in the US offers a lot of potential ‘victims’ and it’s now attractive to malware authors
  • There’s currently a boom, but a bust will follow as Google addresses the SEO (Search Engine Optimization) image poisoning problem
  • The ‘Mac faithful’ will claim that the malware attack is over and that it was nothing more than a phase
  • The social engineering tricks used on Mac now have been well developed and tested on the Windows ecosystem and earning criminal gangs tens of millions of dollars per month
  • The bad guys are targeting ‘low handing fruit’
  • Current malware attack is little more than a ‘light show’ used to trick users
  • The next infection vector is probably about a year away and is likely to again be social engineering scams, and maybe even ransomware that encrypts the user’s documents and demands payment for decryption

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Adrian Kingsley-Hughes is an internationally published technology author who has devoted over a decade to helping users get the most from technology.

Disclosure

Adrian Kingsley-Hughes

All opinions expressed on Hardware 2.0 are those of Adrian Kingsley-Hughes. Every effort is made to ensure that the information posted is accurate. If you have any comments, queries or corrections, please contact Adrian via the email link here. Any possible conflicts of interest will be posted below. [Updated: February 23, 2010] - Adrian Kingsley-Hughes has no business relationships, affiliations, investments, or other actual/potential conflicts of interest relating to the content posted so far on this blog.

Biography

Adrian Kingsley-Hughes

Adrian Kingsley-Hughes is an internationally published technology author who has devoted over a decade to helping users get the most from technology -- whether that be by learning to program, building a PC from a pile of parts, or helping them get the most from their new MP3 player or digital camera.

Adrian has authored/co-authored technical books on a variety of topics, ranging from programming to building and maintaining PCs. His most recent books include "Build the Ultimate Custom PC", "Beginning Programming" and "The PC Doctor's Fix It Yourself Guide". He has also written training manuals that have been used by a number of Fortune 500 companies.

Adrian also runs a popular blog under the name The PC Doctor, where he covers a range of computer-related topics -- from security to repairing and upgrading.

6
Comments

Join the conversation!

Just In

RE: F-Secure: 'Mac Market Share x Google Images SEO Poisoning = Gold Rush'
iceberg34 15th Sep
French banks - which had already been higher earlier in the day - posted some of the biggest rises, as they are the most exposed to sovereign debt in Greece and other heavily indebted eurozone nations.
BNP Paribas closed up 13%, Credit Agricole 5.9% and Societe Generale 5.4%.
On Wednesday, Credit Agricole and Societe Generale each had their credit ratings downgraded by rating agency Moody's, after it reviewed their exposure to Greek debt.
Moody's also said it would keep jigolo medyum web tasarim duvar kagidi ofis mobilyalari buro mobilyalari Hava Perdeleri Hava Perdesi Fiyatlari Hava Perdesi Hava Perdesi Fiyatlari Hava Perdesi Hava Perdeleri sosyal medya bez canta BNP Paribas on review for a possible downgrade.
In the UK, shares in Lloyds Banking Group rose 7.2%, while Germany's Commerzbank added 7.8%.
The euro also gained against the dollar following the announcement by the central banks, adding 0.8% to $1.38519.
Analysts have welcomed the move by central banks, but warned that more will still have to be done to tackle the underlying
ingilterede dil egitimi ingilterede ingilizce ingilterede dil okullari Londra dil okullari ingilterede sertifika programlari
ingilterede master ingilterede yuksek lisans ingilterede egitim ingilterede universite ingilterede mba ingilterede sertifika programlariproblem of high levels of eurozone sovereign debt."The stress is still there as long as sovereign debt issues aren't dealt with aggressively, but this move eases short-term funding problems," said Peter Boockvar, equity strategist at Miller Tabak in New York.
This all depends on how successful this has been for the criminals. At the same time they've targeted Windows users (actually, from what I've researched - not just "Windows" users, but more specifically Windows XP users, the attacks I've seen would be very unlikely to fool someone running Vista or Windows 7, as the graphics displayed don't match those Windows versions).

Now this hasn't got much to do with infections, more to do with "how many people gave credit card details?" If this is significantly fewer than Windows (XP) users (and lets fact it, there are A LOT more Windows users, Windows users could fall for this in far less often "per head" and still make the criminals far more money) then criminals might decide it isn't worth the effort. After all, these people are lazy - otherwise they'd have a legitimate business.

It does seem they are expecting Google to get their act together (and about time) as they are looking for new ways to get this stuff in front of people (latest being Facebook).

So what happens on the Mac is very dependent on what happens elsewhere. I think it likely that Apple will get far more serious about stopping this stuff. Probably the thing that will be a critical factor is how many users move from Windows XP to Vista/Windows 7. These platforms are harder to target, because with the more customisable UI the criminals will find it harder to mimic their "look and feel" (remember these aren't exploits against the OS, they convince the user to install them, they'll find that much harder if they "don't look right").

But trying to see any future of Mac malware is impossible, there are too many variables. One thing that would really help is if Apple introduced "themes" for Mac OS X - especially if they randomly assigned them to users rather than had a fixed default.
@jeremychappell

...a grave mistake. They are not lazy, they are *amoral*. There is a huge difference there. Criminals in many cases work far harder than most people, it's just they don't care about other people's well-being.

Not to mention for most bad guys cybercrime looks victimless, they never see the harm they do, and even if they did it's unlikely they'd care.

But they are not lazy, nor are they stupid. That's the *problem*.

Yes, they go after low-hanging fruit, but then again that's a matter of ROI more than anything else.
I said it after Mac Guard was first seen, and I'll say it again. The flood gates have opened up. The Mac faithful can kick, scream, and yell at me all they want, but burying their head in the sand further propagates the problem, and does nothing to fix it.
0 Votes
+ -
Here's a thought
ego.sum.stig@... 6th Jun
Stop kicking and screaming. You seem intent on declaring everything a doomsday scenario, for Apple, when the truth is that those who whine the loudest (you and the rest) are the ones closer to doomsday.

The rest of the world will do nicely without you all.
@ego.sum.stig@...

Who is whining? The truth is simple: Mac malware isn't going to go away. That hasn't spelled doom for PCs, and we've been dealing with it for years before it was ever a gleam in the author's eyes to go after the Mac.
The Mac malware guys haven't given up even after Apple has started releasing updates to prevent the installation of this Trojan, meaning they're in it for the long run. It's time Mac users take proactive precautions against this sort of thing, or it will continue to nip away at the platform. Yes, that includes running AV software.
French banks - which had already been higher earlier in the day - posted some of the biggest rises, as they are the most exposed to sovereign debt in Greece and other heavily indebted eurozone nations.
BNP Paribas closed up 13%, Credit Agricole 5.9% and Societe Generale 5.4%.
On Wednesday, Credit Agricole and Societe Generale each had their credit ratings downgraded by rating agency Moody's, after it reviewed their exposure to Greek debt.
Moody's also said it would keep jigolo medyum web tasarim duvar kagidi ofis mobilyalari buro mobilyalari Hava Perdeleri Hava Perdesi Fiyatlari Hava Perdesi Hava Perdesi Fiyatlari Hava Perdesi Hava Perdeleri sosyal medya bez canta BNP Paribas on review for a possible downgrade.
In the UK, shares in Lloyds Banking Group rose 7.2%, while Germany's Commerzbank added 7.8%.
The euro also gained against the dollar following the announcement by the central banks, adding 0.8% to $1.38519.
Analysts have welcomed the move by central banks, but warned that more will still have to be done to tackle the underlying
ingilterede dil egitimi ingilterede ingilizce ingilterede dil okullari Londra dil okullari ingilterede sertifika programlari
ingilterede master ingilterede yuksek lisans ingilterede egitim ingilterede universite ingilterede mba ingilterede sertifika programlariproblem of high levels of eurozone sovereign debt."The stress is still there as long as sovereign debt issues aren't dealt with aggressively, but this move eases short-term funding problems," said Peter Boockvar, equity strategist at Miller Tabak in New York.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix