{"id":10529,"date":"2013-03-18T10:29:11","date_gmt":"2013-03-18T18:29:11","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=10529"},"modified":"2014-04-23T14:10:30","modified_gmt":"2014-04-23T21:10:30","slug":"malware-only-one-tool-in-cybercriminals-arsenal","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/malware-only-one-tool-in-cybercriminals-arsenal\/","title":{"rendered":"Don’t Believe in Antivirus? Malware is Only One Tool in a Cybercriminal’s Arsenal"},"content":{"rendered":"

\"\"<\/p>\n

Even though the number and severity of Mac malware has been growing steadily, and despite Flashback infecting a significant percent of the Mac user population last year, there are still some people who don’t “believe” in using antivirus software<\/a> on their Mac. Usually the reasoning is they’re “smart enough to avoid getting infected in the first place,” or they think the chances of getting infected are really low, especially given Apple’s own internal security tools. No matter what we or anyone else say to those folks about the increasing risk of Mac malware, they’ve made up their minds and don’t want to believe in the necessity of protecting themselves. However, regardless of whether or not you believe malware is a problem on Macs, it’s not the only threat you should be concerned about.<\/p>\n

The aim of most cybercrime is data theft, and malware is just one tool in the arsenal criminals have at their disposal to get hold of sensitive personal information.<\/p>\n

Depending on where you are, attackers can reach you a variety of different ways:<\/p>\n

    \n
  1. Public WiFi —\u00a0<\/strong>When you\u2019re on public WiFi, you\u2019re sharing a network with complete strangers. There\u2019s no telling who those strangers are or whether they include people who would do you harm \u2013 especially if you\u2019re somewhere very public and crowded, like a hotel or an airport.<\/li>\n
  2. Breaches —\u00a0<\/strong>When your school, bank, email, social networking site, or other keeper of your personal information gets breached, it may provide the attacker enough ammo to steal your identity, or it could give them sufficient information to target you for further attacks.<\/li>\n
  3. Hacking Accounts —\u00a0<\/strong>This may be the after-effect of a breach. Now that you\u2019re on a hacker\u2019s radar, they may send you targeted malware or try to attack your computer directly.<\/li>\n
  4. Phishing —\u00a0<\/strong>This is another way attackers can get into your account. If they find your email in a breach, if it\u2019s published publicly, or if they attack someone who has your contact information, they can send you an email to try to get you to reveal your password.<\/li>\n
  5. Targeted Attacks —\u00a0<\/strong>If you have something an attacker particularly wants, they may go the extra mile to try to install malware or hack into your accounts or computer, creating tools or attacks that specifically target your vulnerabilities.<\/li>\n<\/ol>\n

    In all of these cases, the goal is the same: someone is trying to take advantage of ways that systems are left open and vulnerable in order to sneak in and make off with your data. Apple does provide some protection already, but it’s not intended to close all the holes attackers could use to get in.<\/p>\n

    By using a few additional defenses, you can make their job much, much harder so that your data will be a less tempting target:<\/p>\n

    Encrypt Your Data<\/h3>\n

    \"\"<\/p>\n

    There are two times an attacker can go for you data:<\/p>\n

      \n
    1. When it\u2019s in place on your machine<\/li>\n
    2. When it\u2019s in transit to or from the network.<\/li>\n<\/ol>\n

      On your machine, you need to know what data lives where and then keep it in a central location that you can encrypt. To protect your data in transit, you can use a Virtual Private Network<\/a> to keep out prying eyes. Make sure sensitive data is encrypted by checking to see the website you\u2019re sending to is using HTTPS (rather than simply HTTP) when you look at the URL.<\/p>\n

      Use Layered Defenses<\/h3>\n

      \"\"<\/p>\n

      Apple provides a few ways to keep you from getting harmed by malware\u00a0\u2013 namely XProtect, the Application Firewall, and Gatekeeper. Using all of these technologies is good, but it does leave a few holes.\u00a0XProtect helps detect malware, but there\u2019s still a big window between when researchers discover new Mac-related threats and when they\u2019re added to XProtect. Malware that is less prevalent never makes it into XProtect, which isn\u2019t much help if you\u2019re one of those few that are affected.<\/p>\n

      Gatekeeper can be helpful in preventing new threats, but there are still plenty of ways malware could get around this tool. Having a dedicated anti-virus program will allow you to detect and remove a wide variety of threats a very short while after they\u2019re discovered \u2013 before they can hit a large number of users.<\/p>\n

      The Application Firewall will help you filter inbound connections, but not outbound. If malware or hackers manage to get into your machine, it can send your data out to attackers. Having a full-featured firewall can help identify and prevent incoming attacks as well as someone trying to get data out from your machine.<\/p>\n

      Update Your Software<\/h3>\n

      \"\"<\/p>\n

      Humans write software and humans make mistakes, so software sometimes has vulnerabilities which need to be corrected. Most software companies update their products from time to time, and popular software is a popular target by criminals, so they frequently update to fix vulnerabilities. Be sure to install those updates as soon as you can<\/a> to limit your exposure.<\/p>\n

      While there are a lot of ways out there that cybercriminals can try to get your data, there are also a lot of ways you can protect yourself. You don\u2019t necessarily need to have your data locked up tighter than Fort Knox \u2013 you just need to have your data locked up well enough that it\u2019s not easy pickings. By closing up holes, fortifying your defenses, and protecting your valuables, you can make stealing your data more trouble than it\u2019s worth for cybercriminals.<\/p>\n

      toolbox photo credit: Stitch<\/a> via photopin<\/a> cc<\/a><\/em><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

      Even though the number and severity of Mac malware has been growing steadily, and despite Flashback infecting a significant percent of the Mac user population last year, there are still some people who don’t “believe” in using antivirus software on their Mac. Usually the reasoning is they’re “smart enough to avoid getting infected in the […]<\/p>\n","protected":false},"author":6,"featured_media":12037,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[13],"tags":[22,291,305,191,86],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\t\n\t\n\t\n