Five Common Myths About macOS Security, Debunked
Summary
Huntress explains that Macs can face malware and targeted threats, but macOS threats differ from Windows and ransomware attempts have generally been unsuccessful. It recommends updates, endpoint security, and caution with suspicious links.
Key points
- macOS malware includes adware, infostealers, spyware such as LightSpy, and threats using AppleScript.
- Built-in protections such as Gatekeeper, TCC, and XProtect do not make Macs impervious; phishing and deceptive ads or extensions remain risks.
- The article says observed macOS ransomware attempts have not successfully run; apparent EvilQuest activity in VirusTotal was attributed to a sandbox bug.
- Mac and Windows threats differ: the article highlights macOS-focused threats such as PUPs, adware, and Shlayer, which uses social engineering to bypass Gatekeeper.
- The article reports that macOS represents 22% of enterprise devices and says enterprise Mac use is growing about 20% year over year.
- Recommended precautions include keeping software updated, patching promptly, using endpoint security, and being cautious with suspicious emails and links.
Article Details
- Topic
- Common macOS security myths, macOS-specific threats, and increasing enterprise adoption
Malware
EvilQueststrictly at VirusTotal, we’d be led to believe that ransomware is running rampant on Macs, namely the EvilQuest/ThiefQuest ransomware, which was first uncovered in mid-2020. However, if we dig deeper into the detailsLightSpy2000s has given way to nation-state-sponsored malware, advanced infostealers, and spyware, like LightSpy. And this malware has even started leveraging Apple-specific tools and languages.LockBitWe can see other attempts to deploy ransomware to macOS, such as the LockBit or Turtle ransomware, but again, with the addition of Apple's TCC checks, most attempts to encrypt user data are rendered moot.Shlayeractivity, macOS observes items like PUPs, adware like search engine hijacking and clickbait, or Shlayer, which leverages social engineering techniques to get the user to override Gatekeeper to execute. SoTurtleWe can see other attempts to deploy ransomware to macOS, such as the LockBit or Turtle ransomware, but again, with the addition of Apple's TCC checks, most attempts to encrypt user data are rendered moot.
Vendors
Products
Gatekeeperto make their devices secure. I could talk ad nauseam about Apple's built-in security features, such as Gatekeeper, TCC, or XProtect, which in and of itself can lead to other hardships like management and such. But domacOSHomeBlogDebunking 5 Major macOS MythsMicrosoft WindowsBack in the early 2000s, Apple released a series of television commercials—the "I'm a Mac, I'm a PC" ones, which featured a person, as the depiction of "Windows,” plagued by "viruses."Transparency, Consent, and Control (TCC)devices secure. I could talk ad nauseam about Apple's built-in security features, such as Gatekeeper, TCC, or XProtect, which in and of itself can lead to other hardships like management and such. But do theseVirusTotalIf we look strictly at VirusTotal, we’d be led to believe that ransomware is running rampant on Macs, namely the EvilQuest/ThiefQuest ransomware, which was first uncovered in mid-2020. However, if we dig deeper into theXProtectsecure. I could talk ad nauseam about Apple's built-in security features, such as Gatekeeper, TCC, or XProtect, which in and of itself can lead to other hardships like management and such. But do these features
Industries
creative artsThis increase is primarily felt in specific fields, such as education, the creative arts, software development, or the entertainment sector (e.g., photography, videography, music production, film/TV). All of this toEducationThis increase is primarily felt in specific fields, such as education, the creative arts, software development, or the entertainment sector (e.g., photography, videography, music production, film/TV). All of this toEntertainmentprimarily felt in specific fields, such as education, the creative arts, software development, or the entertainment sector (e.g., photography, videography, music production, film/TV). All of this to say, now 22% of allSoftware developmentThis increase is primarily felt in specific fields, such as education, the creative arts, software development, or the entertainment sector (e.g., photography, videography, music production, film/TV). All of this to