Sophos trumpets so-called Mac vulnerabilities in attempt to sell so-called security software

“Have you ever had an auto mechanic you didn’t quite trust tell you that your car needed a repair ‘just to be on the safe side?’ The latest alarm bell from U.K.-based security software firm Sophos reminds me of just such a circumstance,” David Zeiler blogs for The Baltimore Sun.

“Last week Sophos announced results of a self-admittedly unscientific poll conducted on the company’s Web site. Of the 350 people who responded, 93 percent said they believed the Mac will be targeted more in the future, up from 79 percent two years ago,” Zeiler reports. “This follows January’s annual ‘Security Threat Report’ from Sophos that devoted an entire page to the ‘rise of malware for Apple Mac computers.’ The discussion centers on the OSX/RSPlug Trojan that emerged last November.”

“Some of you may recall that Trojan – only a series of poor user decisions (starting with visiting the porn sites where the Trojan was found) can result in a compromised Mac. It does not exploit any vulnerability in the Mac operating system or software,” Zeiler reports. “The OSX/RSPlug does not destroy data on a Mac, nor can it spread from Mac to Mac as a virus would. Instead it changes some network settings to redirect the user’s Web browser to fraudulent sites designed to fool users into punching in such personal information as credit card or bank account numbers (otherwise known as ‘phishing’).”

“Sophos was one of the companies to make a big deal out of OSX/RSPlug when it was first detected, trumpeting how Mac users of its security software were protected,” Zeiler reports. “That’s right, Sophos makes Mac versions of its security software, so it’s no shock the company would have strategies to, uh, encourage sales.”

“If someday a particularly gifted hacker succeeds in creating a self-perpetrating bit of OS X malware, I will be among the first to buy and install security software on my Macs,” Zeiler writes. “But not until.”

More in the full article here.

We’re going to turn off our Mac OS X Firewalls for the rest of the day in honor of Sophos… Oh, wait, they’ve been off since the last time one of these A-hole companies cried wolf. Smirk.

46 Comments

  1. I’m sure the hacker that writes a virus for Mac OS X will become world famous.
    I’m also sure the companies that sell the security software are working on it too. How best to sell security software, find a virus.

  2. I had a firewall up, but the latest Leopard requires me to “Allow all incoming connections” and to trust Mac OS X to determine which programs to allow. I had to do this to get my Slingplayer software to work over the WAN, but when I tried to specifically allow my Sling app, it wouldn’t work.

  3. That’s weak. Sophos is saying Mac OS X is vulnerable because 14% more of its site visitors feel that Mac OS X will be “targeted more in the future.” Besides using the opinion of non-experts as fact, what does that mean? Targeted? As opposed to actually “exploited”?

    If you can’t find real world evidence of vulnerability, find something vaguely related and say its relevant. It reminds me of the time security “experts” said Mac OS X was vulnerable because Apple did not hire a security “czar.” Or the widely report and debunked use of third-party wireless USB adapter drivers (which most Mac users would not need) to claim Mac OS X was hacked.

    Whenever we get something like this, I feel MORE secure using a Mac. It shows the security fear mongers cannot think of anything better.

  4. I don’t know anyone who uses a Mac that has had a virus, on their Mac that is. I’ve heard all kinds of talk of the possibility but no reality yet.

    An aside, in the last 2 days I’ve been able to video chat (iChat) with 3 people. One was my mom who is nearly computer ignorant. It was really cute because she had a look of astonishment about what was happening. I would buy a Mac, if we didn’t already own 5 already ( 4 at work ) just for the iChat video. Got two people to switch, both of which were part of the 3 I mentioned. I love this laptop.

  5. When will these people give it up?

    If or WHEN an actual Mac virus is reported, by more than ONE “researcher”, THEN Mac users will consider buying virus prevention software.

    ONE thing I WILL guarantee, with the history these Sophos clowns have of “warning” us over and over and over again of impending viral disasters ready to strike we “unsuspecting” Mac users, for NO reason, I will NEVER buy ANY product these people sell.

    EVER.

    Count on it, idiots.

  6. Well, we all think mac os X is a target. The question is will it continue to be a hard target. I think this is the case, and I’d sure be relying on Apple’s solutions to malware before I installed 3rd party stuff.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.