Sophos research reveals one in five Macs harbour malware

New research released by Sophos has revealed a disturbingly high level of malware on Mac computers - with both Windows and Mac threats being discovered.

Sophos experts analysed a snapshot of 100 000 Mac computers running its free anti-virus software, and discovered that one in five machines was found to be carrying one or more instances of Windows malware.

Although Windows malware on Macs will not cause symptoms (unless users also run Windows on their computers), it can still be spread to other computers.

Additionally, Sophos' analysis shows that 2.7% (one in 36) of Macs were found to be carrying Mac OS X malware.

While Mac users may be relieved that they are seven times more likely to have Windows viruses, spyware and Trojans on their Macs than Mac OS X-specific malware, Mac malware is surprisingly commonly encountered.

“Mac users do need a wake-up call about the growing malware problem,” says Brett Myroff, CEO of Sophos distributor, NetXactics.

The recent Flashback botnet, which affected more than 600 000 users, as well as fake anti-virus attacks, which scare users into handing over their credit card details, dominate the chart of Mac-based threats.

Top Mac OS X malware found on Mac computers (seven-day snapshot of 100 000 Macs):

1. OSX/Flshplyr 75.1%
2. OSX/FakeAV 17.8%
3. OSX/RSPlug 5.5%
4. OSX/Jahlav 1.2%
5. Other 0.4%

Mac malware can spread via USB sticks, e-mail attachments, Web site downloads or even by silent drive-by installations where users don't realise their Macs' security has been subverted.

“Cyber criminals view Macs as a soft target, because their owners don't typically run anti-virus software and are thought to have a higher level of disposable income than the typical Windows user. Mac users must protect their computers now or risk making the malware problem on Macs as big as the problem on PCs,” Myroff says.

Top Windows malware found on Mac computers (seven-day snapshot of 100 000 Macs):

1. Mal/Bredo 12.2%
2. Mal/Phish 7.4%
3. Mal/FakeAV 3.8%
4. Troj/ObfJS 3.6%
5. Mal/ASFDldr 3.3%
6. Troj/Invo 3.0%
7. Troj/Wimad 2.6%
8. Mal/Iframe 1.5%
9. Mal/JavaGen 1.4%
10.Other 61.2%

Some of the malware discovered by Sophos on the 100 000 Mac computers sampled dates back to 2007, and would have been easily detected if the users had run an anti-virus product sooner.

Bredo, a family of malicious programs sent out via spam, accounts for 12.2% of malware detected on Mac computers. The first Bredo variant was detected in 2009, and since then, countless variants have been released. Only last week, it was used in a malicious e-mail campaign that purported to have attached a compromising picture of the recipient.

“The simple fact is that you can scan your Mac for infection from your armchair. The test is painless and free; you just download an anti-virus product and allow it to check your computer and protect it against infections in future,” Myroff says.

Sophos offers its anti-virus for Mac free to home users.