Can Macs get viruses and malware? We ask an expert

restore a Mac to factory settings
mama_mia/Shutterstock
The idea that you don’t have to worry about viruses or malware if you have a Mac is still surprisingly popular. Many people believe that Macs can’t get viruses, and Apple does little to dispel that notion, but is it really true? Can Macs get viruses?

“The answer is definitely, yes,” says Bogdan Botezatu, Bitdefender’s Senior E-Threat Analyst, “There have been incidents, and there will be more.”

A few years ago, Flashback malware exploited a security flaw in Java. It managed to infect 600,000 Macs, which was roughly 1 percent of the user base. There is a page about it on Apple’s website.

Updated by Jeffrey Van Camp on 5-04-2015: For clarification, we use the words ‘malware’ and ‘virus’ mostly interchangeably in this article because, to most people, these are one and the same. However, technically speaking, malware is the blanket term for all malicious software that could attack or infect a computer. Wikipedia’s page on malware is a good resource if you want to know all the many varied types.

There have been other problems since then. The KitM.A backdoor application on OS X was able to take screenshots of user’s desktops. More recently, the Rootpipe exploit has been proving difficult to fix.

“Mac OS X software has more high-risk vulnerabilities than all versions of Windows put together,” explains Bogdan, “Apple markets these products as virus-free. They say you don’t need an antivirus, because they know people hate antivirus software. These utilities often slow down your computer, so they don’t want to promote them.”

Apple has also been criticized for being slow to deal with threats and shut vulnerabilities down. Rootpipe was discovered in October 2014, but the fix only came out this month (April 2015), and it only patches Yosemite, not older editions of OS X. To make matters worse, the patch doesn’t actually fix the problem properly. Apple’s big rival may have a bad reputation, but it has taken decisive action to tackle that perception.

The absence of adoption of antivirus solutions on Mac OS X is hiding the truth,

“Microsoft has been at the forefront of infections for so long, and people started to pressure them to do something, and they did,” explains Bogdan, “The response time for fixing vulnerabilities is much shorter now, and you are also advised to run a third-party security tool.”

Apple used to mention that you could run antivirus software on your Mac for additional protection, but it doesn’t anymore. So, do Mac users need to worry, or not?

The visibility problem

Because many people don’t use antivirus software on Macs, it’s difficult to get a handle on the size of the risk.

“The absence of adoption of antivirus solutions on Mac OS X is hiding the truth, because malware is not going to get reported,” Bogdan explains, “We know what’s happening in the Windows eco-system because we have this visibility and threat intelligence, but with Mac OS X there’s often no antivirus to report back to base.”

How would someone know if their Mac was infected?

apple-imac-2014-bottom-screen-1500x1000

“They wouldn’t, because most of the malware is very, very stealthy these days,” says Bogdan, “It’s the same with PCs, hackers realized that the more silent they are, the longer they can get away with it. Modern Mac OS X and Windows malware does not slow down your PC, unless they are Bitcoin miners.”

To try and get a better idea of the size of the risk, we asked independent, anti-virus research institute, AV-Test.

“We have discovered and registered more than 48 million new unique malware samples this year alone, but more than 98% have been written for the Windows platform,” says Andreas Marx, AV-Test CEO, “Less than 5,000 new viruses were written for Mac OS X, but these kinds of malicious software do exist.”

Why Windows is a more popular target

There are still a few compelling reasons for hackers to target Windows machines ahead of Macs, and the same logic accounts for Android being targeted ahead of iOS.

“Malware for Windows and Android is ‘performing’ much better for the criminals writing the malware,” explains Andreas, “This means, malware for these platforms pays off easier and, in the end, it’s all about making money.”

There are more malware writing tools out there already for the most popular platforms. There are more SDKs, and more open source software, that hackers can extract information from.

It’s going to cost the hacker more to build Mac OS X malware than Windows-based malware.

“It’s going to cost the hacker more to build Mac OS X malware than Windows-based malware,” says Bogdan.

The reputation Mac OS X has for security is also not entirely undeserved. Mac OS X does have safety mechanisms built-in. You don’t have root privileges over the machine, you have to enter your password to reconfigure the system, and there’s a gatekeeper sub-system that doesn’t allow you to install files unless they are digitally signed by Apple. Of course, none of that means you can’t write malware for Mac OS X.

“It’s more complicated, you can’t go shotgun on Mac OS X users like you would be able to do with Windows users,” explains Bogdan, “But, if someone has the right motivation and resources, they can do it. It’s not technically impossible.”

A secure OS is not enough

Even a platform designed with one eye on security is not enough to ensure your safety.

“Maybe you have a well-designed operating system, but when you’re interacting with the web you’re using third-party software,” Bogdan says, “Browsers, Java, Flash player, Adobe, there’s no guarantee they’re as well designed as your OS.”

There’s also a serious problem with phishing attacks and social engineering, which are entirely platform agnostic. These are additional threats that antivirus software will often safeguard against, so, even if you don’t feel the need for virus protection, you might consider installing something to protect you from other online threats.

How to protect yourself

If you’re concerned, and you want some peace of mind, it’s easy enough to take action. The advice offered by Andreas and Bogdan was exactly the same:

  • Keep your operating system and your applications up to date. Always install the latest security patches.
  • Run an antivirus product or a security suite. AV-Test will publish a new Mac OS X report next week, but Andreas told us that Avast, Avira, Bitdefender, Kaspersky and Symantec all scored a 100 percent detection rate.
  • Use common sense and be suspicious. If something looks too good to be true, then it probably is.
Mobile

Here’s how to disable FaceTime on your Apple iPhone and Mac

FaceTime is a great way to stay in touch with friends and family, but many don't need it, or simply don't want it. Thankfully, it's very easy to disable FaceTime, both on your iPhone or iPad, and on your Mac. Here's how.
Computing

A new Mac Pro is supposedly coming in 2019, but what will it be like?

Our Mac Pro 2019 rumor roundup covers all the top news, leaks, and rumors about the new Mac Pro set to be announced sometime in 2019. Here's what Apple has said, what the experts think, and what's likely to show up with the new Mac Pro.
Computing

These 30 useful apps are absolutely essential for Mac lovers

There are literally hundreds of thousands of great software programs compatible with MacOS, but which should you download? Look no further than our list of the best Mac apps you can find.
Computing

These are the 6 best free antivirus apps to help protect your MacBook

Malware protection is more important than ever, even if you eschew Windows in favor of Apple's desktop platform. Thankfully, protecting your machine is as easy as choosing from the best free antivirus apps for Mac suites.
Computing

Enjoy Windows on a Chromebook with these great tips and tricks

If you want to push the functionality of your new Chromebook to another level, and Linux isn't really your deal, you can try installing Windows on a Chromebook. Here's how to do so in case you're looking to nab some Windows-only software.
Computing

Switch your WMA files for MP3s with our quick conversion tips

The WMA codec may be great when it comes to multi-channel surround sound, but unfortunately, it falters in terms of compatibility. Check out our guide on how to convert WMA files to MP3 via web-based or desktop methods.
Computing

Looking for a new laptop? These 5 notebooks are on sale through Presidents’ Day

If you're ready to ditch your aging notebook, you can score some fantastic Presidents' Day savings right now on Microsoft's Surface Pro 6, Dell's XPS 13, HP's Spectre x360, Lenovo's Yoga C930, and Dell's G5 15 Gaming laptops.
Virtual Reality

Getting into VR is spendy. Which headset is truly worth your hard-earned cash?

Virtual reality has finally gone mainstream, but how do you find the best VR headset for you? Check out a few of our favorites, whether you want the best of the best or a budget alternative for your mobile device.
Computing

These Windows 10 keyboard shortcuts will take your skills to a new level

Windows 10 has many new features, and they come flanked with useful new keyboard shortcuts. Check out some of the new Windows 10 keyboard shortcuts to improve your user experience and save more time!
Computing

What is Wi-Fi 6? Here's a look at the next evolution of the wireless standard

We're exploring the new naming convention for wireless standards, how it affects the devices you buy, and what the upcoming Wi-Fi generation is changing for the better.
Computing

Windows is getting a face-lift in 2020, but you can get a sneak peek right now

Microsoft is increasing the lead time for an upcoming major update to Windows 10, giving Windows Insiders the ability to test it right now, even though it's not set for release until 2020.
Emerging Tech

A.I.-powered website creates freakishly lifelike faces of people who don’t exist

No, this isn't a picture of a missing person. It's a face generated by a new artificial intelligence on the website ThisPersonDoesNotExist.com. Here's how the impressive A.I. works.
Deals

The best Presidents’ Day sales 2019: Amazon, Walmart, Dell, and more

Presidents' Day sales are a great chance to score electronics, clothing, home and office stuff, and other goodies at a discount. We’ve smoked out a large handful of the best of these Presidents' Day deals, from tech to bedding, to help…
Deals

Keep your MacBook safe and dry with an Under Armour backpack for under $50

Under Armour is having a huge sale this weekend to help you on your quest for a better backpack. The UA Outlet Exclusive sale is going on now through Monday, February 18th, offering great discounts on stormproof backpacks.