[turtle]

Yeah, my mom does nothing strenuous on her computer at all. Online shopping and basic spreadsheets. The biggest challenge she is going to have it not being able to keep her REALLY old copy of Excel running and have to buy a new copy. She doesn't want to move to Numbers so she gets to pay.

Here is the actual projected time right now: Arrives Feb 17 - Feb 24

I'm actually surprised it is that far out. Even for a BTO model. You'd think that the second tier with doubled RAM would be readily available but I guess Apple is still struggling with parts or something. That is a long way out. I do hope it gets here sooner though.

[PB PM]

So now there is M1 specific malware. A user demonstrated getting around all of Apples protection, gaining root access, deleting apps, and such.

https://arstechnica.com/gadgets/2021...gun-to-appear/

[pscates2.0]

Good grief.

[turtle]

I didn't read the specifics of that malware but it looks pretty rough once installed. I'm sure (but, again, haven't read the specs) that using a non-admin account could mitigate the problem here. I mean, if you give it install rights with those admin crews then you are screwed still. If it can gain admin rights without a source admin account though... that is something different entirely.

[kscherer]

Don't install Adobe Flash, Acrobat, or anything "anti …" or "clean …" and you are likely to never find this stuff.

[Elysium]

Originally Posted by PB PM Dead wrong. Most Windows users I know find the Mini the most compelling Mac. mind you I’m not talking about the types that would buy a Dell/HP/Acer/ASUS prebuilt machine. I for one am a builder, by your definition, yet I also own three Macs (iMac + 2 Mac Mini). As a builder, a Mac Mini is there perfect Mac for the few Apple apps that I prefer to use over Windows software. I already have several high quality 1440p monitors, I have no use for an iMac now, and wouldn’t buy one again.

I’m one of those people that has been nursing along a 2008 unibody MacBook as my base “Apple desktop or app required system” with a built PC (housed in a G5 case) for pretty much anything else.

Now both need desperately need an upgrade and I finally gave some free funds after emerging from a medical/student loan induced Chapter 13. Given the state of the graphics card and RAM market building is a terrible idea right now. I’m planning on getting a M1 mini to tide me over for the next 9 months until the PC gaming/mining world shakes itself out.

[pscates2.0]

I saw a thing at AppleInsider where 16GB RAM Mac minis are on sale for a good price (well, a bit less than the $899 they'd go for direct from Apple).

Here it is.

[PB PM]

Originally Posted by kscherer Don't install Adobe Flash, Acrobat, or anything "anti …" or "clean …" and you are likely to never find this stuff.

And run an ad-blocker. A lot of malware side-loads through infected ads.

This malware, a Safari extension, was using using an Apple signed signature, meaning it could install without throwing up warnings. Apple has revoked that signature and it will no longer run on Big Sir.

[kscherer]

Originally Posted by PB PM And run an ad-blocker. A lot of malware side-loads through infected ads.

Yes. And do that.

I use ABP, and other good ones exist I'm sure.

[Frank777]

I use Macs precisely so I don't have to deal with crazy viruses and rampant malware.

Haven't run an ad blocker before. How does malware sideload through an ad? I thought individual apps ran in protected spaces to prevent things like this?

[kscherer]

It doesn't. But for a lot of folks, ads are the way in just by getting the user to click on "Adobe Flash is out of date. Click here!"

[turtle]

And there is a second malware variant that is native to both Intel and M1. Been out for a while too. Though this one doesn't seem to actually do anything yet.

Given the likely vector is malicious ads I'm sure it targets those who needed to install their Flash updates too.

[PB PM]

Not many ads use flash anymore, most are HTML5, or pictures. I suspect the biggest uptake is from illegal torrents and sketchy download sites. I’ve had to remove malware and pups from my parents computers a few times. My mum always got them from ads on genuine baking/cooking sites. Sadly their computers 09 iMac/09 13” MPB, are all running old versions of Mac OS, so they cannot run a modern version of Safari, and no adblockers seem to work on that version anymore. I’ve tried to get them to switch to a browser that is at least up to date (Firefox or Chrome) but they won’t. At least I got them to use malwarebytes to get them off. I’m really looking forward to the M1 iMacs, they will upgrade when they come out.

[Elysium]

Originally Posted by PB PM Not many ads use flash anymore, most are HTML5, or pictures. I suspect the biggest uptake is from illegal torrents and sketchy download sites. I’ve had to remove malware and pups from my parents computers a few times. My mum always got them from ads on genuine baking/cooking sites. Sadly their computers 09 iMac/09 13” MPB, are all running old versions of Mac OS, so they cannot run a modern version of Safari, and no adblockers seem to work on that version anymore. I’ve tried to get them to switch to a browser that is at least up to date (Firefox or Chrome) but they won’t. At least I got them to use malwarebytes to get them off. I’m really looking forward to the M1 iMacs, they will upgrade when they come out.

Definitely some targeted audiences by the choice of websites that get hit with malicious ads.

My router notifications light up like a Christmas tree with blocked malicious site messages while the girlfriend is browsing knitting/crochet sites.

[drewprops]

Dirty, dirty Knitters.



...

[turtle]

A commenter at Ars actually went through pretty details steps to remove or verify you're clear from the Silver Sparrow malware. For once, the comments were worth reading. At least one of them anyway.

[drewprops]

Maybe we should copy those instructions over here?


...

[Frank777]

Maybe it's not a bad idea if Apple takes their time with the M1X.

Although I suspect, since AI has a story on iMac discounts, that the M1X is already baked and in the process of delivery.

[kscherer]

Chip development has to be at least 2 years ahead of final production. The M1X was finished perhaps 2 years ago. I can pretty much guarantee they have been in the production-testing phase for 6 months or longer. In the labs they are production-testing the M2, and finalizing designs for the M2x, prototyping the M3 and M3x, and developing plans for the M4 and beyond. This stuff takes years to hash out.

[Brad]

Originally Posted by drewprops Maybe we should copy those instructions over here? ...

Direct link to the source with all the actual details: https://redcanary.com/blog/clipping-...parrows-wings/

TLDR: If you find a file at any of the following locations, your system is likely infected. Deleting them and rebooting is a good start, but there are more things you should check and purge as well.

/tmp/agent
/tmp/agent.sh
/tmp/version.json
/tmp/version.plist
/tmp/verx
~/Library/._insu
~/Library/Application Support/agent_updater/agent.sh
~/Library/Application Support/verx_updater/verx.sh
~/Library/Launchagents/agent.plist
~/Library/Launchagents/init_agent.plist
~/Library/Launchagents/init_verx.plist
~/Library/Launchagents/verx.plist