Previous 1 2 Next 24 Replies Latest reply: May 29, 2011 7:36 PM by Linc Davis
Kikikins Level 1 Level 1 (0 points)

Hello Community!

 

While i have had a Mac for a while... I havn't really broached the subject of firewalls and anti-virus, this may seem silly but i have always been one of those "i have a mac, mac's don't get hacked"

 

Anywho, my identity was "stolen" and the bank told me it was because i have a "keystroke hack" on my computer... and that i need to run anti-virus to fix it.... um, i am not all that computer savvy, but is a hack not a virus?

 

I am running... 10.6.7 and figured out how to turn my firewall on and in stealth mode. I don't know how to view logs, i can't find any way to do that.

 

How can i figure out if  i have a keystroke hack? I am so lost.

 

Any help would be greatly appreciated!!

 

Kiki


PowerBook, Mac OS X (10.6.7)
  • MacJoseph Level 3 Level 3 (595 points)

    Kiki

     

    You can try MacScan. It is commercial software, 29.99 but I think it is worth the investemnt. It will scan for spyware, including keystroke hacks.Hope this helps.

     

    Joseph

  • Kikikins Level 1 Level 1 (0 points)

    Joseph,

     

    Thanks for that, this is something i can try.... when i have access to my funds again. until then, is there anything free out there that will help? What about this LIttle Snitch that everyone is talking about? Will the OS X Firewall protect against a keystroke hack... Are macs actually suseptable to these hacks? We have 3 other macs in our house, 2 laptops and a tower...

     

    If we do have said hack, how do we get it out?!

     

    Ack!

  • Poikkeus Level 4 Level 4 (2,785 points)

    Download Sophos Anti-Virus for Mac (free) http://www.sophos.com/en-us/products/free-tools/sophos-antivirus-for-mac-home-ed ition.aspx. Update to the latest version. Perform an anti-virus run, and fix the errors.

     

    Keystroke hacking is extremely rare on the Mac. However, since you're convinced that your identity has been compromised, you might want to change your passwords to make sure the problem won't happen again. I'm not sure how you got hacked, if indeed you did, but Sophos is a good first step.

  • Linc Davis Level 10 Level 10 (173,020 points)

    Anywho, my identity was "stolen" and the bank told me it was because i have a "keystroke hack" on my computer... and that i need to run anti-virus to fix it.... um, i am not all that computer savvy, but is a hack not a virus?

     

    Did your bank send an IT security expert to examine your computer? If not, then it can't possibly know whether you've been hacked, and whoever you spoke to is just making up nonsense. I can make up several much more plausible stories. Someone with access to your computer stole the password when you weren't looking. Or you chose a weak password, and someone guessed it. Or there was a breach of security at the bank itself (maybe the most likely scenario.)

     

    Besides all that, if you have been hacked, there is no way to detect it short of a bytewise inspection of all your files. Anti-virus software would be of no help whatsoever. To eliminate the possibility, you would have to completely erase your hard drive, reinstall the OS from original media, reinstall your software from known-good copies, and then restore your documents.

  • Kikikins Level 1 Level 1 (0 points)

    I am not entirely conviced it was my computer that this person got my account information from. The bank seems to think that they got it from a keystroke hack when i purchased something online.

     

    I have never had a problem with that before. And i don't share my debit card with anyone, or leave it anyhwere where it can be seen or taken.

     

    I just wanted to make sure i cover all my bases....

     

    This Sophos will protect against the Keystroke thing? It is infact a virus?

  • MacJoseph Level 3 Level 3 (595 points)

    KiKi

     

    I believe you can download the trial version on MacScan, that will check for the keystroke hack. ClamXav is free but to my knowledge is it stricly AV and malware, it is free to use. Little Snitch is commercial software as well. It is a good prgram IMO as it will detect any connection to your Mac and allow you to block it if it looks suspicious.

    I don't really know how susceptable Macs are to keystroke loggers. Perhaps someone with more knowledge will pick up on this thread, and be able to tell you. I apologise I am not able to say for sure. Like I said try the trial version of MacScan to see if the keystroke logger is on your Mac. You can set your firewall to block all incoming connections which will allow your basic Internet needs, just go to sys prefs, security, and the advanced settings of firewall to set that mode. Hope this helps.

     

    Joseph

  • Kikikins Level 1 Level 1 (0 points)

    Yeah, i was kinda taken aback when they said that, becase as i said before, i am of the "macs don't get hacked" mind set. I don't purchase anything from websites without certificates and what not, and i actually have not used my card online in eons.

     

    But i just wanted to cover all of my bases. Actually, not that i think of it, i don't have a password on my computer, and i didn't have the firewall up, so i just put a password on my computer and turned on the firewall....

  • Linc Davis Level 10 Level 10 (173,020 points)

    Sophos won't protect you from anything. It's worthless. All it will do, if it does anything at all, is slow down and destabilize your computer.

  • MacJoseph Level 3 Level 3 (595 points)

    Kiki

     

    Please, please always run your firewall. Run it in stealth mode, and or block all connections. You can check stealth mode before activating block all connections I do believe. And always set a login password for your Mac.

     

    Joseph

  • Kikikins Level 1 Level 1 (0 points)

    Joseph,

     

    Thanks for that, i can download the free version of MacScan and Little Snitch sounds like it could help too. But if anyone else has some ideas that would help that would be great. Like i said we have 3 other computers in our house and i think it might be a great idea to get them protected as well.

  • Kikikins Level 1 Level 1 (0 points)

    Oh Wow! Thanks Linc for letting me know that! Don't want to download soemthing that isn't going to do anything!

  • Kikikins Level 1 Level 1 (0 points)

    yeah i just did that... is there a reason i can't see a log of some sort?

  • Linc Davis Level 10 Level 10 (173,020 points)

    Let me clarify something. Anti-virus software works by scanning for files that contain a pattern that matches one found in known malware distributed on the Internet. A hacker who had physical possession of your computer, or who somehow managed to gain control of it remotely, would not install one of those known malware programs. That would be pointless. He'd install something that didn't match any known pattern. I'm by no means a career IT criminal, but if I had your computer I could install a keylogger that no anti-virus software would detect, not now and not ever.

     

    I doubt very much that you've been hacked in any real sense, but if you have, you'll be wasting your time installing any kind of software to counteract the hack.

  • Linc Davis Level 10 Level 10 (173,020 points)

    Please, please always run your firewall.

     

    What on earth do you think the point of that would be? The misinformation in this thread is out of control.

Previous 1 2 Next