Top Mac Malware and Security Flaws

Mac malware do they exist? Yes, they do and as you read on, you will understand Macs aren’t 100% immune to cyber-attacks. Long story short no device is fully protected from malware attacks. To stay safe, you need to use the best anti-malware app and keep following certain security tips. Luckily, there is a tool called Intego Mac Premium Bundle X9 that helps locate and clean malware from Mac. Using it in no time you can get rid of Mac malware and other threats.

This powerful and complete Mac protection tool comes with real-time antivirus protection, firewall, identifies and blocks untrusted devices, and does a lot more.

You can download it by clicking here.

Another important thing about Mac malware, that most of you don’t know is that the M1 Chip released in November 2020 considered more secure than Intel processors is also found infected by Silver Sparrow malware. This explains whatever the company says Mac machines like Windows are also at risk.

To make you understand more about Mac malware, here we will enlist malware threats.

Top Mac Malware 2021

1. XLoader – Malware-as-a-Service

The latest threat targeting Mac machines is notorious XLoader malware. After infecting the Windows machine, it now runs on macOS.

In July 2021 Check Point security researchers discovered a Mac version of the XLoader malware. Though a new variant of the infamous Formbook, this malware is designed to steal login credentials, record keystrokes, and run malicious files without the user’s knowledge.

2. XcodeSpy

Second on our list of top Mac malware is XcodeSpy, a trojan hidden in Xcode projects in GitHub. This malware targets Xcode developers with EggShell Backdoor and misuses the run script feature in Apple’s Xcode IDE.

Once installed the backdoor records the victim’s microphone, camera, and keyboard. Moreover, it can upload and download files.

The malware has been found in a ripped version of TabBarInteraction.

3. Silver Sparrow

Dubbed as Silver Sparrow, this Mac malware so far has infected 29,139 macOS endpoints. Most importantly, the malware targets Mac machines with an M1 processor, as discovered by Red Canary. To infect machines, Silver Sparrow uses the macOS Installer Javascript API.

Moreover, as of February 17, this Mac malware has affected endpoints across 153 countries, including high volume detection in the United States, Canada, Germany, the United Kingdom, and France.

4. Pirri/GoSearch22

Fourth on our list is the infamous Pirri/GoSearch 22, the first malware to target M1 Macs. This malware is adware, and it inserts ads into places where they won’t show normally.

One thing common in all these malware is that they infect Mac through processes outside the App Store. This means if you download software from unknown sources, or pirated software chances of you being infected by these and other malware threats increase.

The best way to stay protected from such threats is to avoid installing software outside the App Store. In addition to this, using the best security tool like Intego Mac Premium Bundle X9 is recommended. This tool will shield your Mac from threats lurking around.

5. ThiefQuest (aka EvilQuest)

Seen in 2020, ThiefQuest, as the name explains, is designed to steal data from files and folders stored on your Mac. The malware when detected for the first time in 2017 was said to encrypt your Mac and spreads via pirated software found on a Russian torrent forum. Though it doesn’t act like ransomware as there was no way to pay. Due to this, later ThiefQuest is known to be ransomware that doesn’t extort a ransom, what it does is obtain the data. Known as ‘Wiper’ malware, this was the first of its kind on the Mac.

6. LoudMiner (aka Bird Miner)

This one is a cryptocurrency miner malware that started to appear in 2019. Distributed via a cracked installer for Ableton Live, this cryptocurrency mining software tries to use your Mac’s processing power to make money. It started to appear in 2019.

7. SearchAwesome

Seventh on our list is OSX.SearchAwesome is a kind of adware that targets macOS systems. Detected in 2018, this malware can intercept encrypted web traffic to inject ads and target user data.

8. FakeAV

This is a generic name given to malicious software that acts like and pretends to offer antivirus for macOS. But in reality, they infect the Mac and steal your data.

9. GravityRAT

GravityRAT is the infamous Trojan on Windows. It was used to target attacks on the military, and it was used to upload Office files, take automatic screenshots and record keyboard logs.

Also, it is capable of bypassing Gatekeeper by using stolen developer certificates. The Trojan is hidden in copies of various genuine programs developed with .net, Python, and Electron.

10. XCSSET malware

Discovered in August 2020 this malware exploits vulnerabilities in Webkit and Data Vault. The malware seeks to access information via the Safari browser. This includes login details of Apple, PayPal, Google, and Yandex services. Another type of information includes notes and messages sent via Skype, Telegram, QQ, and WeChat.

Alongside this malware, there are other threats too. We won’t be explaining them in detail here, however, we will be sharing their names.

OSX/Shlayer – detected in 2018 this malware is a variant of adware infecting Macs via a fake Adobe Flash Player installer.

OSX/CrescentCore – detected in 2019 this Mac malware was found on comic-book-download site

OSX/Linker – detected in May 2019 this malware exploits a zero-day vulnerability in Gatekeeper to install malware.

OSX/NewTab – this malware adds tabs to Safari.

NetWire and Mokes – it is “backdoor malware” that captures keystroke logging and screenshot taking.

CookieMiner – detected at the end of January 2019 this malware steals users passwords and login information for their cyberwallets

Mac Auto Fixer – detected in 2018 it is a Potentially Unwanted Program, which piggybacks onto your system via bundles of other software.

Mshelper – detected in May 2018 this crypto-miner app runs in the background and hogs resources.

MaMi – detected in January 2018, this malware installs a new root certificate to intercept encrypted communications,

Dok – detected at the end of April 2017 this macOS Trojan bypasses Apple’s protections and could hijack all traffic entering and leaving a Mac

X-agent – detected in February 2017 X-agent malware steals passwords, takes screenshots, and collects iPhone backups stored on your Mac.

MacDownloader – detected in 2017 this malware spreads via a fake update to Adobe Flash

Fruitfly – detected in January 2017, Fruitfly malware does surveillance on targeted networks

Other noteworthy malware threats are – Pirrit, KeRanger, Safari-get,SSL, and Gotofail error.

That’s all on top of Mac malware. If you want to know more about them, we can cover them in the next. Do share your thoughts about the same. We look forward to hearing from you soon.