Apple M1 Chip - native Malware/Anti-Virus App

Hi,

I am getting my new MacBook Air with the new M1 chip very soon and wanted to check if ...

a) I need a malware/anti-virus program and

b) if there is already one out there running natively on the new M1 machines?

any recommendations?


thank you very much

martin.

Posted on Nov 18, 2020 3:53 AM

Reply
Question marked as Top-ranking reply

Posted on Jun 25, 2021 11:05 AM

Yes, malware, adware, scareware, and ransomware is out there in the wild attacking Macs. Most of it is not terribly dangerous but more annoying. Mac's are not immune to these threats but if you observe common sense safe practices it is unlikely to be a problem.


Exercising some caution in regards to phishing emails and text / social media messages as well as noticing those pop-up advertisements that attempt to convince you that you are infected and to install fake anti-malware tools, etc. goes a long way to protecting you. The rest is a matter of the following:


  1. Do not install software from anywhere except the Mac App Store or directly from a reputable vendors direct website. Most cleaners, maintenance tools, Anti-virus, and Anti-malware tools are not to be trusted and are mostly unnecessary. If they are legit tools, they do more to slow down your Mac than anything else.
  2. If an application states it wasn't signed by an Apple Developer nor Notarized (scanned for malware by Apple) think twice and maybe a third time before you install it. Make sure you fully trust the source of this application.
  3. Do not pirate software nor media of any kind (very common for malicious payloads to be included)
  4. Be wary of free games or download shareware sites that tend to include adware and another annoyances. Pay attention to text during the installation and uncheck necessary things like browser extensions, etc.
  5. Running any ad-blocker will go a long way to protecting you from rogue drive-by malware inside ad networks. I've had things download and attempt to run that originated from a rogue advertisement on a mainstream website.
  6. Avoid the seedy underbelly of the Internet (pr0n, hacking, illegal activity, etc.)
  7. Do enable the Firewall
  8. Disable any Sharing features in System Preferences you do not really need
  9. Do keep macOS and all your Applications up-to-date with security updates.
  10. Never Ever install a Configuration Profile unless it's your employer or schools IT department asking you to enroll BYOD (Bring Your Own Device) or it's a Mac owned by your employer or school. Never install any Configuration Profile that isn't signed with a valid certificate either. You will see a lot of red text and warnings. Do not ignore them.


[Edited by Moderator]


Similar questions

132 replies

Feb 21, 2021 11:51 PM in response to suitguy25

So, what are you doing to maintain a safe existence these days? All of us Team M1 early adopters are essentially Live Lab Rats for APPL in this new ecosystem.


Me? I'm using all best practices as far as settings the M1 OS offers, using my head and not going places I shouldn't go and not opening the door and inviting the obvious usual suspects to camp on my system.


And.......running Malwarebytes as a safety net.

Feb 22, 2021 10:08 AM in response to ndakxn

This has been blown way out of proportion. The new malware isn’t anything special and has absolutely nothing to do with which CPU is being used. The code is a universal binary that will run on either Intel or M1 machines. It is not reliant on the CPU. M1 owners are no more vulnerable to this than Intel owners and it still take user action to install it on one’s Mac. You have to be tricked into downloading and installing it, just like all the other malware out there.


This made the news because it’s the first that recompiled to run native on M1 machines, nothing else.


And Apple is already taking measures to squelch it.


https://appleinsider.com/articles/21/02/22/apple-has-taken-steps-to-eradicate-mysterious-malware-strain



Feb 22, 2021 7:45 PM in response to schloma1977

I think there is a lot of posturing and conjecture in this thread.


It is true that apple's platform security architecture is robust. It is also a fact that this is no guarantee of safety. No one will disagree that hackers and nation states are actively finding, exploiting, and remaining private about system, browser, and cryptographic technology vulnerabilities.


May I encourage some levity?


Threat protection software is often marketed as malware/anti-virus software because "endpoint security" does not make sense to the average consumer. Whether or not malware and viruses are prevalent on MacOs, what the original poster and most people who have this concern are asking for is software that puts up additional guardrails around their computer usage, either because they know their behavior could invite exploitation, or because they know they have no idea.


Apple recognizes that different individuals and organizations may have different standards or needs for throttling behavior. To that end, Apple has included an API in Catalina and later for independent software vendors to do exactly that (literally called "Endpoint Security"). Additional mechanisms can be utilized that have not traditionally been native to most of Apple's core operating system offerings (e.g. more informative inbound/outbound connection monitoring, ad/popup suppression, javascript execution monitoring, and content signature scanning).


Software that leverages these APIs or takes extra measures to alert and protect customers is not useless.

Jun 15, 2021 11:12 PM in response to schloma1977

I mean there is no need to get an anti virus for Mac because there is already built in anti virus systems and any anti virus will just slow down your Mac. All you need is common sense to not download random stuff. Even if you really need ant virus, you would need bitdefender however the latest version of Mac OS is full of anti virus software already.

Jun 25, 2021 4:47 AM in response to schloma1977

That's going to stir up a hornet's nest!


There were recent cases of malware showing up on thousands of the new M1s, although the experts couldn't figure out what it did, and I did read that Mac malware is now more prevalent than Windows for the first time ever.


Some people will violently disagree with this. I'm no expert, so they may be right. A very helpful Apple tech support guy did suggest to me installing Malwarebytes free version on my machine and running a scan once in a while.


I guess a lot of it depends on what apps you want to install and the kind of website you visit too!


BTW, if your MacBook Air is as good as my Mini M1, you've made a good choice. The M1 is absolutely fantastic.

Sep 24, 2021 8:02 PM in response to schloma1977

Still looking into this myself. Be aware that some corporate/business users are REQUIRED to have antivirus/anti-malware... software installed by their auditors, insurers and/or government entities. Planning a move from Intel to Apple silicon at home in the next year or two. Retired after 36+ years in IT (some of the years before there was a mac or pc). More concerned about malware and ransomware, especially from advertisements on technical and investment websites, which have occasionally been problematic in the past. Also, infrequent very-well crafted emails (although I rarely click on links in emails, or even sites like this).


Did notice that Microsoft has Mac M1 native support for endpoint security. Some others still require Rosetta 2.

https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/announcing-apple-m1-native-support/ba-p/2685585

Nov 23, 2020 3:58 PM in response to KiltedTim

@KiltedTim


A good antivirus is a very good complement and it is worth paying for it. At least if you have and work with material worth protecting or in any way work with customers exchanging files. You can receive a word document with a macro virus in it, and send the infected document on to your customer. That would ve good for your reputation and your company :) That you could maybe prevent with a decent antivirus software. At least the known ones...


And there are now a lot of viruses that are not good even if you use a mac. More users on a platform generates more interest and effort from the virus makers. https://en.wikipedia.org/wiki/MacOS_malware


Why mention Kaspersky and Russia? I see the antivirus discussion in general. I would not use crypto software from China, Russia, US and a couple more... I prefer, but do not require to have the source code to look at. You must make your own decisions from where you buy your software. No difference if it is antivirus software, crypto software or any other software.


Common sense and general IT knowledge is just one part of it, but you obviously 100% rely on it.


You are out on deep water here :)


Feb 22, 2021 2:56 PM in response to ndakxn

The ‘experts’ wouldn’t recommend any of them. And again, those ‘shiny new M1’s’ have NOTHING to do with anything. It’s not the hardware that malware takes advantage of, it’s the users who fall for installing it. I ran AV software for years and the ONLY thing it ever detected was Windows executables which, of course, would not run on a Mac.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Apple M1 Chip - native Malware/Anti-Virus App

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.