Your Mac is xxx tv shownot safe. Well, at least not as safe as you think it is.
That's the big takeaway following the detailed investigation of a particularly insidious strain of Apple-focused malware that has potentially been around for up to a decade — all the while broadcasting video and audio from victims' computers back to an unknown attacker.
SEE ALSO: Remotely hacking ships shouldn't be this easy, and yet ...The malware, dubbed Fruitfly, was first reported on in January by Malwarebytes. However, it was Synack Chief Security Researcher Patrick Wardle who blew the lid off Fruitfly's true nature on July 21.
"[A] hacker built this to spy on users for probably perverse reasons."
In a conversation with Mashable, Wardle explained that he was sent the malicious software by a friend earlier this year, and that he found it interesting enough to investigate. That investigation led to some unexpected places.
Wardle discovered that the malware directed infected computers to contact a command and control server for instructions — known as "tasking" — but that the primary server was offline. As such, he realized the computers would look for specific backup domains for their directions. It just so happened that "one or two" of those domains were available for registration.
So he registered one, and created a server that could talk to the malware. What he found, well, is pretty damn creepy.
First, Fruitfly gave him both the infected computers' IP addresses — which can be used to determine their locations — and the computers' names. With most Macs, the computer name is just the owner's name.
So, for starters, Wardle was sitting on the names and locations of many of the victims. But that's not all. The malware gave him the power to remotely switch on webcams and microphones, take control of mice, change files, and would even notify him if the computer was in use by its owner.
This Tweet is currently unavailable. It might be loading or has been removed.
"Usually you see that in government or nation-state software," Wardle, who used to work for the NSA, observed.
But the victims weren't nation-state actors — they were regular people. Strangely, however, the system didn't seem designed for financial gain as is more typical of malware infecting the devices of everyday folks. Instead, it appeared to have a completely different objective.
"[A] hacker built this to spy on users for probably perverse reasons," explained Wardle, emphasizing that it was "designed to performance surveillance."
Approximately 90 percent of the infected computers are located in the U.S., with Wardle identifying around 400 compromised devices. He cautioned that those are just the infected systems he found, and that the total could be in the low thousands. Why so low? He speculated two reasons: To keep things manageable for the aforementioned creep, and to avoid detection.
Speaking of detection, how did this thing go undiscovered for so long? Well, according to Wardle, a lot of that has to do with Macs.
"Mac security software is not that good," he notedbefore elaborating that while Macs are good at detecting known threats, they are not that good at identifying new threats. Which, well, is a not-so-gentle reminder that even Mac users should get webcam covers. What's more, Wardle added that Macs are actually easier to hack than recent versions of Windows — a statement which is sure to not win him any love in the Apple community.
Wardle contacted law enforcement with his findings, and he says the entire Fruitfly malware net appears to be shut down at this time. And while that is good news for the 400 victims he identified, the findings suggest that a host of Mac-focused malware may already be out there under all of our noses. All someone needs to do is look for it.
Topics Apple Cybersecurity
Poynter takes down database meant to spotlight fake news and biased sourcesTeacher warns students not to spoil 'Avengers: Endgame' with fantastic noteChase bank tried to be relatable on Twitter and got absolutely dunked onPost your Strava workouts: New Snapchat AR lens lets you share your latest activityAmazon Music Prime is adding 98 million songs, but only on shuffle'Quordle' today: See each 'Quordle' answer and hints for November 2'Wendell & Wild's Kat Elliot is a badass protagonist in her own comingAmazon Music Prime is adding 98 million songs, but only on shufflePSVR2 launches in February for $550It turns out purposely messing with your targeted ads isn't a good idea'Quordle' today: See each 'Quordle' answer and hints for November 2Conservatives are already turning on Elon Musk over Twitter content moderation10 hobbies you can learn to do online so your life is a little less boringThe cursed 'vegan lasagna' is simply not a lasagna12 gifts for people who need to organize their techIt turns out purposely messing with your targeted ads isn't a good ideaElon Musk says Twitter Blue will cost $8, and include blue tick verificationThese new photos of Prince Louis will make you swoon at his cutenessPoynter takes down database meant to spotlight fake news and biased sources'Quordle' today: See each 'Quordle' answer and hints for October 30 Every movie name Results from Logan Paul vs. KSI and Jake Paul vs. Deji boxing match Bill Hader's 'Barry' Season 3 is back, and we've never needed this show more The internet's divided on Nabisco's animal crackers box redesign BFFs Lizzo and Harry Styles perform 'I Will Survive' at Coachella 'Moon Knight' episode 4's ending changes everything Tesla Tequila shows up in online store for $420, sells out immediately 'My Brilliant Friend' offers sweet catharsis when Elena comes into her own Wordle today: Here's the answer, hints for April 22 Meta Quest Gaming Showcase: Trailers for Meta's exciting 2022 VR games lineup Uber scraps mask requirements, says 'you can always cancel the trip' Sacha Baron Cohen shares an impressively awkward #TBT clip of Trump The most streamed TV shows of the week involve a bunch of crimes 'The Office' stars recall one scene that made the entire cast break The 'f*ck your zodiac sign' meme wants to know who you really are as a person Only the iPhone 14 Pro will get the new 48 When Native American spirituality shows up on social media, ask who's profiting Wordle today: Here's the answer, hints for April 25 Why you should block big corporations on Twitter The Obamas are severing their exclusive deal with Spotify
2.5278s , 8225.5625 kb
Copyright © 2025 Powered by 【xxx tv show】,Co-creation Information Network