User guide

Product Review: Mac Security ‐ July/August 2014 www.av-comparatives.org

Introduction: Macs and Security Software

In January 2014, ZDNet

and other sourcres reported the existence of cross-platform botnet software

that installs by exploiting a vulnerability in Java SE 7 Update 21 and earlier. It can infect Windows,

Linux and Mac OS X computers running the affected Java versions. At about the same time, ZDNet

also reported that the Flashback botnet, which it claims had infected over 600,000 Macs in 2012,

was still in existence, albeit with a much-reduced number of infected machines (22,000). Reports

such as these should serve as a warning to anyone who believes that the Mac OS is immune to

malware attacks and that Mac users do not need to consider security issues.

For a sensible discussion of the subject, it is necessary to understand that a computer virus is only

one of a number of different types of malware (malicious software). These days, viruses make up a

small percentage of all known malware; Trojans (e.g. malicious programs disguised as games or

music files) are much more common. Whilst the number of actual viruses affecting Mac OS X may be

negligible or even zero, Mac systems clearly can be infected by Trojans, if users are fooled into

installing them. Please note that nearly all manufacturers still call their products “antivirus”,

although in reality they protect against all types of malware, including Trojans.

Experienced and responsible Mac users who are careful about which programs they install, and which

sources they obtain them from, may well argue – very reasonably – that they are not at risk from

Mac malware. However, we feel that non-expert users, children, and users who frequently like to

experiment with new software, could definitely benefit from having security software on their Mac

systems.

As with Windows computers, Macs can be made safer by employing good security practices. We

recommend the following:

1. Do not use an administrator account for day-to-day computing

2. Use a sandboxed browser such as Google Chrome

3. Uninstall/disable the standalone Flash Player

4. Uninstall/disable Java unless it is essential for you

5. Keep your Mac operating system and third-party software up-to-date with the latest patches

6. Use secure passwords (the Mac includes the KeyChain password manager)

7. Deactivate any services such as Airport, Bluetooth or IPv6 that you don’t use

8. Be careful about which programs you install and where you download them from

http://www.zdnet.com/cross-platform-java-bot-found-7000025736/