Mac malware of 2016

Objective-See:

Due to sheer volume, Windows malware generally dominates the malicious code and news scene. Of course, Macs are susceptible to malware as well and 2016 saw a handful of new malware targeting Apple computers.

In this blog, I wanted to discuss all Mac malware that appeared this year. While each sample has been reported on before (i.e. by the AV company that discovered it), this blog aims to cumulatively cover all in one place. Moreover, for each, we’ll identify the infection vector, persistence mechanism, features/goals, and describe disinfection.

This is a long and complicated post but might be of interest to those of you who deal with these issues.



2 thoughts on “Mac malware of 2016”

  1. An interesting subtext to this is who discovered and reported them first. Of the six, two were caught first by Palo Alto Networks, one by ESET, one by BitDefender, one by MalwareBytes and one by Kaspersky. It’s not definitive, but it’s an interesting barometer for seeing whose detection technology is able to root out undocumented malware first (PA firewalls do packet-level inspection of packages both inbound and outbound, so it stands to reason they’d catch more).

Leave a Reply

Your email address will not be published. Required fields are marked *