{"id":9862,"date":"2017-09-06T15:36:24","date_gmt":"2017-09-06T22:36:24","guid":{"rendered":"https:\/\/blog.hellotech.com\/?p=9862"},"modified":"2021-06-11T11:47:02","modified_gmt":"2021-06-11T18:47:02","slug":"fruitfly-malware-mac","status":"publish","type":"post","link":"https:\/\/www.hellotech.com\/blog\/fruitfly-malware-mac","title":{"rendered":"FruitFly Malware Has Been Spying on Mac Users for a Long Time"},"content":{"rendered":"\n

We don\u2019t want to scare you, but your Mac could be harboring a FruitFly malware that has been spying on you for years<\/em>. Authorities and experts are scrambling to investigate this nasty case of infection, too. Malware attacks on Apple computers are becoming commonplace in recent years. In fact, Mac malware cases have reached new highs<\/a> in 2017 (and we\u2019re still halfway through).<\/p>\n\n\n\n

The unprecedented rise means our chances to encounter a particularly menacing malware may have pretty much doubled. One recently discovered strain has been outright disturbing that security experts have alerted law enforcement agencies for help.<\/p>\n\n\n\n

The FruitFly Malware<\/h2>\n\n\n\n

The cyber security firm, Malwarebytes, has recently discovered an unusual piece of malware that\u2019s called FruitFly<\/em>. Contrary to its unintimidating moniker, this piece of Mac malware can actually do some really nasty stuff behind the scenes.<\/p>\n\n\n\n

Few of the frightening things the FruitFly does include capturing images of what\u2019s on the screen, spying on users through the computer\u2019s camera, and logging key strokes. Even more terrifying than these is the fact that it has been doing them undetected for a long time.<\/p>\n\n\n\n

Sneaky Existence<\/h2>\n\n\n\n

Malwarebytes investigated the first strain of the FruitFly malware earlier this 2017. A second version, the FruitFly 2, came to their attention a few months later.<\/p>\n\n\n\n

Upon closer inspection, though, the researchers realized the code on the malware has been modified to work on the Mac Yosemite<\/a>. As a reference, this OS was publicly released in October 2014. Meaning, the malicious software may have been around even earlier than that year.<\/p>\n\n\n\n

It\u2019s a scary realization that had security experts scrambling to find out how it got on Mac computers and who could be behind this terrifying malware.<\/p>\n\n\n\n

The Search for\u00a0Clues<\/h2>\n\n\n\n

To say the FruitFly malware is mind-boggling is an understatement. Security experts have their hands full trying to figure out how it infected Macs and who could be the brain behind such a potent threat.<\/p>\n\n\n\n

What they\u2019re certain is the fact that Mac users can no longer be too confident about their computer\u2019s security these days. FruitFly serves as the perfect reminder that even Macs aren\u2019t as formidable against malware as it used to be.<\/p>\n\n\n\n

Number of Infected Users<\/h2>\n\n\n\n

Patrick Wardle, a chief security researcher who\u2019s in on the FruitFly<\/em> case, has discovered 400 computers that have been infected by the malware. That\u2019s just the number of Macs infected by the newer FruitFly malware strain.<\/p>\n\n\n\n

He got the figure after he successfully decrypted parts of FruitFly\u2019s code (after months of analyzing the malware). Wardle then set up a server to intercept traffic from infected computers and that\u2019s when he got connected to 400 IP addresses and computer names.<\/p>\n\n\n\n

He concludes the investigation with the belief that the figure may just be a small portion of the actual number of compromised machines.<\/p>\n\n\n\n

Reinforcements from Authorities<\/h2>\n\n\n\n

With all these disturbing details coming to the surface, security experts have consequently alerted national law enforcement regarding the malware. FBI, on their part, neither confirmed nor denied the existence of pertinent investigations.<\/p>\n\n\n\n

Despite reinforcements, it remains unclear how the FruitFly malware got into Mac systems. Experts couldn\u2019t even pinpoint if it has been designed to target random or specific individuals. Could this be the work of some online thief who\u2019s after people\u2019s bank accounts?<\/p>\n\n\n\n

Sinister Purpose<\/h2>\n\n\n\n

Security researchers don\u2019t believe this malware attack has a financial motive. FruitFly may have the capacity to steal financial credentials, sure, but Wardle doesn\u2019t think this is the work of a criminal who may be stealing people\u2019s personal data to make money.<\/p>\n\n\n\n

As a former NSA analyst, he ruled out the possibility of a government-sponsored hacker. He believes the FruitFly\u2019s design centers around cyber espionage.<\/p>\n\n\n\n

\u201cI believe its goals were a lot more insidious and sick: spying on people,\u201d Wardle reveals.<\/p>\n\n\n\n

Protecting Macs vs. FruitFly Malware Strain<\/h2>\n\n\n\n

With the FruitFly malware operating undetected on Macs for years, it\u2019s clear that the OS\u2019 defenses aren\u2019t as reliable in the face of major malware onslaught. Protect your computer better with these tips:<\/p>\n\n\n\n

Steer clear from automatic user logins<\/h3>\n\n\n\n

Macs automatically login into your user account by default. Disable this feature, especially when you\u2019re using public Wi-Fi. You don\u2019t want to give free passes to hackers who may be using the same network.<\/p>\n\n\n\n

Here\u2019s how to disable the feature:<\/p>\n\n\n\n