Share
Embed
Transcript
55 slides
-
THERE'S NO VIRUS ON MAC ! OSX* 1 — There's
no virus on Mac ! , by Paul Taykalo, MacPaw -
PLAN > History > No viruses then what? > Types
of Malware > Infiltration and Persistence > Defence and common sense 2 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
There are, as far as we know, no Mac OS
X viruses in the wild. — Apple in 2009 3 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
SO THERE'S NO VIRUS ON MAC ! OSX* 4 —
There's no virus on Mac ! , by Paul Taykalo, MacPaw -
Q & A 5 — There's no virus on Mac
! , by Paul Taykalo, MacPaw -
VIRUS A computer virus is a type of malware that,
when executed, replicates itself by modifying other computer programs and inserting its own code — Wikipedia 6 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
7 — There's no virus on Mac ! , by
Paul Taykalo, MacPaw -
NO VIRUSES THEN WHAT? 8 — There's no virus on
Mac ! , by Paul Taykalo, MacPaw -
MALWARE 9 — There's no virus on Mac ! ,
by Paul Taykalo, MacPaw -
DISCLAIMER BEFORE WRITING A "VIRUS" 10 — There's no virus
on Mac ! , by Paul Taykalo, MacPaw -
MALWARE CLASSIFICATION 11 — There's no virus on Mac !
, by Paul Taykalo, MacPaw -
> Polymorphic Packers/Bundlers (File Binders) > Trojans > RootKits >
Backdoors > SpyWare > Ransomware > Adware and PUA 12 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
> Polymorphic Packers/Bundlers (File Binders) > Trojans > RootKits >
Backdoors > SpyWare > Ransomware > Adware and PUA 13 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
IT'S JUST SOME ADWARE 14 — There's no virus on
Mac ! , by Paul Taykalo, MacPaw -
IT'S JUST SOME ADWARE 15 — There's no virus on
Mac ! , by Paul Taykalo, MacPaw -
IT'S JUST SOME ADWARE - Browser Manager - Screenshot Controller
- Task Manager - System Controller - Devices Access - Displaye Alerts - Run as Root 16 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
INFILTRATION 17 — There's no virus on Mac ! ,
by Paul Taykalo, MacPaw -
INFILTRATION > Bundles > Vulnerabilities > System Backdoors > Application
Backdoors > User misleading messaging 18 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
DO YOU LOVE KITTENS ENOUGH? 19 — There's no virus
on Mac ! , by Paul Taykalo, MacPaw -
DO YOU LOVE KITTENS? 20 — There's no virus on
Mac ! , by Paul Taykalo, MacPaw -
DO YOU LOVE KITTENS? 21 — There's no virus on
Mac ! , by Paul Taykalo, MacPaw -
DO YOU LOVE KITTENS? 22 — There's no virus on
Mac ! , by Paul Taykalo, MacPaw -
DO YOU LOVE KITTENS? 23 — There's no virus on
Mac ! , by Paul Taykalo, MacPaw -
FREE PHOTOSHOP CRACK 24 — There's no virus on Mac
! , by Paul Taykalo, MacPaw -
INSTALLERS IN DMGS [Adobe Photoshop CC 2014.dmg]Adobe Photoshop CC 2014/Install.app/Contents/MacOS/Install
[AdobeFlashPlayer-4.dmg]Installer.app/Contents/MacOS/Installer [AdobeFlashPlayer.dmg]Installer.app/Contents/MacOS/Installer [AdobeFlashPlayer_24_ast_install.dmg]Install Adobe Flash Player.app/Contents/MacOS/Install Adobe Flash Player [FMP.dmg]Installer.app/Contents/MacOS/AppOZ [FlashPlayer.dmg]Installer.app/Contents/MacOS/Installer [Google Earth.dmg]Installer.app/Contents/MacOS/DM [Lightspark-Player-Pro.dmg]Lightspark-Player-Pro.app/Contents/Resources/VSInstaller.app/Contents/Resources/files/VSearchAgent.app/Contents/MacOS/VSearchAgent [MPlayerX (9).dmg]MPlayerX.app/Contents/MacOS/Installer [MPlayerX.dmg].resources/VSInstaller.app/Contents/Resources/files/VSearchAgent.app/Contents/MacOS/VSearchAgent [MPlayerX.dmg].resources/VSInstaller.app/Contents/Resources/files/agent.app/Contents/MacOS/agent [MPlayerX.dmg]MPlayerX.app/Contents/MacOS/Installer [MacPhotoPro-2.dmg]Installer.app/Contents/MacOS/InstallerS [NicePlayer (2).dmg].resources/VSInstaller.app/Contents/Resources/files/agent.app/Contents/MacOS/agent [NicePlayer.dmg].resources/VSInstaller.app/Contents/Resources/files/agent.app/Contents/MacOS/agent [Player.dmg]Installer.app/Contents/MacOS/mac [ZipDevil.dmg]Installer.app/Contents/MacOS/AppSO [doctopdf.dmg]Installer.app/Contents/MacOS/AppHD [ez7z214.dmg]Installer.app/Contents/MacOS/Installer [installgenieo.dmg]Installer.app/Contents/MacOS/Installer [installtransmit-2.dmg]Installer.app/Contents/MacOS/Installer [maps.dmg]Installer.app/Contents/MacOS/AppIR [pdf-converter.dmg]Installer.app/Contents/MacOS/InstallerS [pdf_king.dmg]Installer.app/Contents/MacOS/AppMC [pdfking_sk.dmg]Installer.app/Contents/MacOS/AppMAT [pdftoolkit.dmg]Installer.app/Contents/MacOS/AppRC 25 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
WINDSURF 26 — There's no virus on Mac ! ,
by Paul Taykalo, MacPaw -
WINDSURF1 IS IT A DOCUMENT?X 1 https://objective-see.com/blog/blog_0x38.html 27 — There's
no virus on Mac ! , by Paul Taykalo, MacPaw -
WINDSURF1 INFILTRATION DIAGRAM 1 https://objective-see.com/blog/blog_0x38.html 28 — There's no virus
on Mac ! , by Paul Taykalo, MacPaw -
WINDSURF1 1 https://objective-see.com/blog/blog_0x38.html 29 — There's no virus on Mac
! , by Paul Taykalo, MacPaw -
OTHER TYPES OF INFILTRATION 30 — There's no virus on
Mac ! , by Paul Taykalo, MacPaw -
We're catching all type of malware ... we know about
31 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
PERSISTANCE 32 — There's no virus on Mac ! ,
by Paul Taykalo, MacPaw -
PERSISTANCE > Daemons > Launch Agents > Login Items 33
— There's no virus on Mac ! , by Paul Taykalo, MacPaw -
PERSISTANCE CRON 34 — There's no virus on Mac !
, by Paul Taykalo, MacPaw -
DUPLICATING INSTALLERS 35 — There's no virus on Mac !
, by Paul Taykalo, MacPaw -
MANAGED PROFILES > Browser settings > Network configuration > Whatever
36 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
ON GUARD OF YOUR MAC 37 — There's no virus
on Mac ! , by Paul Taykalo, MacPaw -
GATEKEEPER > Code Sign > Structure Validation 38 — There's
no virus on Mac ! , by Paul Taykalo, MacPaw -
GATEKEEPER? sudo spctl --master-disable 39 — There's no virus on
Mac ! , by Paul Taykalo, MacPaw -
QUARANTINE AND FILE ATTRIBUTES 40 — There's no virus on
Mac ! , by Paul Taykalo, MacPaw -
NOTARIZATION 41 — There's no virus on Mac ! ,
by Paul Taykalo, MacPaw -
HARDENED RUNTIME 42 — There's no virus on Mac !
, by Paul Taykalo, MacPaw -
HARDENED RUNTIME > No dylib injection > No JIT >
Executable memory protection 43 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
READONLY FILE SYSTEM 44 — There's no virus on Mac
! , by Paul Taykalo, MacPaw -
SYSTEM INTEGRITY PROTECTION 45 — There's no virus on Mac
! , by Paul Taykalo, MacPaw -
FDA && PERMISSIONS 46 — There's no virus on Mac
! , by Paul Taykalo, MacPaw -
XPROTECT Apple's XProtect system, which is included in OS X,
is a non-intrusive and rudimentary anti-malware program that runs in the background quietly without the need for user interaction; 47 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
IS IT ENOUGH? 48 — There's no virus on Mac
! , by Paul Taykalo, MacPaw -
WHAT CAN WE DO? > Firewall > Do not trust
installers from Torrents > External Backups! > Don't Install Flash Player 49 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
WHAT CAN WE DO? > Specialized Tools > Bundled Tools
50 — There's no virus on Mac ! , by Paul Taykalo, MacPaw -
51 — There's no virus on Mac ! , by
Paul Taykalo, MacPaw -
THANK YOU 52 — There's no virus on Mac !
, by Paul Taykalo, MacPaw -
Q & A 53 — There's no virus on Mac
! , by Paul Taykalo, MacPaw -
THERE'S NO VIRUS ON MAC BY PAUL TAYKALO, MACPAW @TT_KILEW
54 — There's no virus on Mac ! , by Paul Taykalo, MacPaw