Except for a few proof of concepts, most Mac malware fizzled quicker than a Republican presidential campaign looking for a Las Vegas sugar daddy.
Due to a recently closed vulnerability in Java, the Flashback Trojan Horse is claimed to have infected up to 600,000 Macs worldwide. That’s a lot of infection for the What Me Worry Mac platform.
If you visited a malicious website recently that hosted Flashback, and your Mac’s browser was set to run Java, the Flashback Java applet could have infected your Mac.
How can you find and remove Flashback?
I found three ways to check. One uses Terminal. The other two are quickly crafted apps that check your Mac for an infection.
First, the F-Secure website gives you step-by-step instructions to use the Mac’s Terminal app to find and delete Flashback (assuming it’s on your Mac).
Second, the feee app FlashbackChecker will check your Mac for an infection, but it doesn’t remove it if it’s there.
Finally, there’s the donation ware Anti-Flashback Trojan app, which checks your Mac for the infection, and, if it finds Flashback, deletes it (which you can also do manually in Terminal).
Apple posted a recent Java update with prevents your Mac from being infected but doesn’t delete Flashback if you have the infection already.
600,000 Macs were infected? So says a lone source in Russia. But few reports have surfaced that Flashback has been found in the wild. I visit a number of forums online and few Mac users have posted that their Macs were compromised by Flashback.
Still, it’s better to be safe than sorry.