Switchback Virus Infects Macs, Nobody Notices
It had to happen sooner or later. There's no glory in creating Windows worms any longer - and script kiddie can do it, and there are more holes in Windows than in a warehouse of Swiss cheese.
No, someone finally wrote the first new Mac virus in nearly a decade, the first one to specifically target OS X. Rumors lead us to believe the malware was written by a disgruntled Windows programmer at Microsoft who was sick to death of hearing how Macs never got infected with viruses, worms, Trojans, and the like.
Or maybe it was just some hapless IT guy upset because one of his clients switched from Windows to the Mac and no longer needs the kind of support they did with the OS from Redmond.
Or maybe it was someone at one of the antivirus companies upset that Mac users weren't buying enough copies of their antivirus software.
Whatever, the Switchback virus exists, and it's spreading like molasses in January.
Yep, that fast.
Switchback is one very clever virus, but it's having a hard time distributing itself, so most of the world doesn't even know it exists.
For a start, it can only infect Macs running OS X 1.2.5 or 1.2.6 (it's possible that 10.2.7 could be infected as well, although we haven't heard about infections from any G5 owners yet). So out of 25-30 million Mac users, maybe 7-8 million tops are using the right version of OS X.
Then they have to be using Safari 1.0 and visit a site displaying affiliate ads for XGeeks.com. Although these ads are presented as linking to a hot new mail order company specializing on OS X, that's just a cover. Their prices are just high enough to keep people from ordering, but the commission rate is enough to get every Mac webmaster interested enough to sign up for the program.
That's the clever part. They try to target just Mac users, and when they visit the XGeeks site, they get infected - assuming they're running the right version of OS X and Safari 1.0. And Switchback then propagates itself again, assuming the visitor has Mail configured on their computer.
Considering the size of the OS X installed base, the number of Safari 1.0 downloads, and the number of OS X users who use Mail rather than something else, we estimate that this virus could potentially infect 5,000 to 20,000 users. And it could take months to reach that level, since OS X users don't restart nearly as often as Windows or classic Mac OS users.
It's only a start, but this is the first OS X virus ever, so everyone should try to get their hands on a copy to see what makes it tick. The next X-virus might actually do something malicious. Consider Switchback a proof of concept that almost sorta works.
Of course, with the latest Window worm on the rampage, nobody but the Lite Side staff has even noticed Switchback.
And why is it called Switchback? Because when you read the source code, the first comment calls OS X users to give up their nonconformity and switch back to Microsoft Windows.
Recent Lite Sides
- You Might Be a Computer Geek If..., 2009.06.17. 20 signs that you just might possibly be a computer geek.
- What if Apple thought like a PC company?, 2007.11.01. Apple has innovated and blazed its own trail. But what if it had followed the path taken by the PC copycats?
- How Microsoft can turn Vista lemons into lemonade, 2007.10.22. How Microsoft could profit by no longer allowing manufacturers to sell new PCs with Windows XP installed.
- More in the The Lite Side index.
Links for the Day
- Mac of the Day: Mac LC II, introduced 1992.03.23. The LC gets 4 MB base RAM, gains virtual memory thanks to 68030 CPU.
- May 19 in LEM history: 99: Student Bill of Rights - 01: First Apple Stores - 03: Upgraded beige G3 problems - 04: The Mac legacy - More for Mac users in superstores than many realize - 06: Smart design make the MacBook a winner - 08: Top 10 freeware - My first iMac
- Support Low End Mac
Recent Content on Low End Mac
- World Book Encyclopedia 2012 DVD, Tommy Thomas, Reviews, 2013.03.05. "You may be asking yourself, in an age of Wikipedia and instant information, is World Book still relevant?"
- Vintage Computer Festival SouthEast, April 20-21, 2013, Simon Royal, Mac Spectrum, 2013.02.25. Old Apple gear and old PCs.
- iMessage: The Ultimate Messaging Service?, Simon Royal, Mac Spectrum, 2013.02.21. In most ways, Apple's iMessage is far superior to BlackBerry Messenger.
- More links in our archive.
- Best Mac mini Deals
- Best 13" MacBook Pro Deals
- Best Intel iMac Deals
- Best iPod touch Deals
- Best iPhone Deals
- Best iPod nano Deals
- Best iPod classic Deals
- Best Apple TV Prices
- More deals in our archive.
Low End Mac Reader Specials
Cult of Mac
Shrine of Apple
The Mac Observer
Accelerate Your Mac
The Vintage Mac Museum
Mac Driver Museum
System 6 Heaven
System 7 Today
the pickle's Low-End Mac FAQ