+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: Mac Maleware (/showthread.php?tid=4428665)
Mac Maleware - Darkdave04 - Sep 2, 2014
Friend got maleware on her mac keeping her from conecting to saffari
gives her a number to call and when we call it they want a SIN
apple wants 140$ to fix it -.-
can anyone give me some help on how to remove this?
i have never had this problem on mac so im new to this
* - Hunting Rifle - Sep 3, 2014
Most of the time if you just google a key element of the page that is shown you'll get a fix.
* - Deany - Sep 3, 2014
But I thought that macs can't get
Spoiler (Click to View)
* - Shadowon - Oct 6, 2014
hey dude, i can contact you via MP, xd.. pm me your skype, i want to talk to you about 1 of your threads
* - BlacksmithSec - Oct 7, 2014
DarkDave - If this has only occured recently, ie since the bash exploit came out (on 29th sept) then the operating system should be considered likely compromised and reinstalled - the exploit was so serious that if you have been hit there is very little chance of being able to secure the system without reinstalling
ps if there was any saved website credentials on the mac (eg facebook, ebay, banking) they should be changed immediately
* - Aura - Oct 7, 2014
(Oct 7, 2014 09:49 AM)BlacksmithSec Wrote: DarkDave - If this has only occured recently, ie since the bash exploit came out (on 29th sept) then the operating system should be considered likely compromised and reinstalled - the exploit was so serious that if you have been hit there is very little chance of being able to secure the system without reinstalling
ps if there was any saved website credentials on the mac (eg facebook, ebay, banking) they should be changed immediately
.... Nope. You should read this :
http://www.reuters.com/article/2014/09/26/us-cybersecurity-shellshock-apple-idUSKCN0HL1R620140926
http://www.brantfordexpositor.ca/2014/09/26/apple-says-shellshock-bug-not-a-risk-to-vast-majority-of-mac-users
http://www.cnet.com/news/vast-majority-of-os-x-users-safe-from-bash-shellshock-bug-apple-says/
* - BlacksmithSec - Oct 8, 2014
Aura i can see what you are getting at but the fact that the mac has already got toasted would suggest that the user likely was vulnerable, and if not directly then perhaps as a result of an existing infection that was resident on the mac.
Apple always downplay bugs that affect OSX, i personally would find the statement from Rapid7's Tod more persuasive and air on the side of caution
from the Cnet link you sent:
""Anybody with systems using bash needs to deploy the patch immediately," Tod Beardsley, an engineering manager at security firm Rapid7 told CNET yesterday."
* - Aura - Oct 8, 2014
(Oct 8, 2014 01:22 AM)BlacksmithSec Wrote: Aura i can see what you are getting at but the fact that the mac has already got toasted would suggest that the user likely was vulnerable, and if not directly then perhaps as a result of an existing infection that was resident on the mac.
Apple always downplay bugs that affect OSX, i personally would find the statement from Rapid7's Tod more persuasive and air on the side of caution
from the Cnet link you sent:
""Anybody with systems using bash needs to deploy the patch immediately," Tod Beardsley, an engineering manager at security firm Rapid7 told CNET yesterday."
We're not sure of that yet. I should create a thread in the OS X section and ask the casual users to enter the command string to check if they're vulnerable or not.