InvestorsHub Logo

mmoy

08/04/15 4:07 PM

#141800 RE: chipguy #141799

"Victims first have to be tricked into downloading and opening a disk image file, running the installer app inside, and clicking through OS X's are-you-sure-you-want-to-run-untrusted-things-from-the-internet warnings. Then the software uses the escalation-of-privilege bug to silently install adware and other junk."

Well, you have to be gullible enough to install something from a website. Which means that you have to enter your Admin password.

Unfortunately there are a fair number of gullible people out there. If you have gullible users, don't give them an Admin account and they can't install the malware.

Or run Mac Antivirus (there are a number of them out there, some free as on Windows). The virus definition files are tiny though.

I'm quite familiar with this kind of exploit.


ibc

08/04/15 4:21 PM

#141801 RE: chipguy #141799

Lower risk != Zero risk