You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

rootkit detection tool

Please can someone tell me a real rootkit detection tool to use on macbook pro mid 2012 OS Sierra? If the only true option is to boop through a secondary OS ( I think hydrance??) can someone please post the process including how to build the disc?


Thanks!


Mauricio

iPhone 5, iOS 6.1.3

Posted on Mar 13, 2017 12:05 PM

Reply
Question marked as Top-ranking reply

Posted on Jan 27, 2018 5:14 AM

100 percent incorrect. Looking in exploit databases there are hundreds of exploits for Sierra. Including root kits. You should be doing more dudilligence then supplying false information.

6 replies

Dec 29, 2017 11:17 AM in response to mfilho

So, Macs are clearly vulnerable. The CIA have shown us that. Intel made a tool, which I looked at briefly....it doesn't seem to be an easy thing to use for the average end-user....


https://www.pcworld.com/article/3179348/security/after-cia-leak-intel-security-r eleases-detection-tool-for-efi-rootkits.…


If you Google Mac and rootkit, you'll find a number of hits concerning CIA activity, as well as what a couple of researchers showed at industry conferences (one was called Thunderstrike, I think, and then there was a more concerning sequel to that one).


It's not a safe world. Apple's, or anyone else's, contention that Macs are malware proof is laughable.

Mar 13, 2017 12:39 PM in response to mfilho

A "rootkit detection tool", if you were to find such a thing, could only identify something known to alter macOS "Sierra". Since there is nothing known that can do that, it's a waste of time to even look for one. Please read About System Integrity Protection on your Mac - Apple Support.


I hope you also realize that if an operating system (any operating system) were to be so maliciously altered, it would be a trivial matter for that rootkit to circumvent software intended to detect it.


If you truly have reason to believe your Mac's software has been subject to malicious interference the only way to recover from that hypothetical breach would be to erase it completely.

Mar 13, 2017 2:52 PM in response to John Galt

Thank you!

I looked it over and what I was actually trying to discover was if it would possible for a malware to infect my macbook's kernel as a rootkit malware like it happens on a Windows PC, in which the only safe way to detect and remove it would be through the use of a hirens boot disc. I am taking CompTIA 200 -901 & 902 and this subject came up in class tis morning. As curiosity I did some quick look up on the net and of course saw a bunch of macOS rootkit detection tools and hirens alternatives for macs, but what I needed really was to get an answer from one of you here, if there was actually possible to be infected by a rookit malware on macOS Sierra. As I understand from your answer and looking at the link you provided (About System Integrity Protection on your Mac - Apple Support) it is not possible. Am I right?

rootkit detection tool

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.