
This is how anti-virus worked back in the 90s. The Gatekeeper technology built into macOS looks at the apps’ certificates (called ‘Notarization tickets’ by Apple) and either allows the user to install the software or blocks it. If a security scanner sees that fingerprint it knows that malware is in play. If the malware has been seen before, it has a known fingerprint (the hash). The technical term for how this works is ‘hash-based’ malware detection. This certifies the apps as being free of known malware. But some developers don’t want to use that, so Apple scans their applications using a service called Notarization. Protection actually starts at the App Store, which checks for malware. Hashing out the problem (Gatekeeper and Notarization) Step 1: Stop known bad files Apple doesn’t make a big deal about it, and it’s not something you’ll run into very often, but there are (sort of) three main components of macOS devoted to securing the system from malware. macOS has anti-virus protection built inĭespite the perceived lack of threats, Apple has built anti-malware protection into macOS, the operating system that runs today’s MacBooks of various types.

They will use obfuscated web links, Office Macros, Trojanised applications and can even exploit vulnerable applications without user interaction. You can expect attackers to use the same type of techniques as those who focus on Windows targets. Steal or damage data and provide remote access.Gain access to targets through social engineering or technical means.However, it is possible to create malware for macOS and the excellent book, “ The Art of Mac Malware” goes into a lot of detail.įor our purposes it’s useful to know that Mac malware can do pretty much everything that Windows malware can do, such as: There is malware for the MacĪs we’ll see, the Mac doesn’t face the same level of malware threat that Windows users experience. Some argue (convincingly) that, as the Mac has routinely occupied less than 10 per cent of the computer market for years, its lack of users makes the platform less interesting for general cybercriminals. The famous Mitchell and Webb advert of 2007 was the most obvious dig at the prevalence of Windows malware and the lack of Mac threats. Apple has long marketed its operating system as being free of ‘viruses’.
