Writing Bad @$$ Malware For OS X

[@ZexMaxwell]

I'm a windows user. I knew apple was kinda late in the game of malware defense... but this just shocks me. Thanks Patrick for your work. I really hope Apple will get up to par to windows really soon.

[@LemonChieff]

"I really hope Apple will get up to par to windows really soon." No. Apple decided to require kext to be signed not long ago… It means you need a developer license to make drivers… OR be apple. And since apple provides all the drivers you'll ever need and packs it with macOS (every version gets all the drivers) . You shouldn't be installing kernel extensions on a mac to begin with unless you're running a hackintosh. It's not something a typical mac user or even a power user would even bother with, there is just no reason to.

[@JonasDAtlas]

"So how does OS X get on an end user's computer? As I said, most are spread by Trojans..." Missing words are hilarious sometimes.

[@steartfires3039]

The idea of registering a piece of malware's hash as a google ad word is genius.

[@ESTl24]

Ty

[@ViddyOJames]

the real reason people say macs don't get viruses is because macs are such a small part of the market that nobody wants to waste time making them only to cause minimal chaos

[@LemonChieff]

Ipse dixit. Straw man.

[@ViddyOJames]

@@LemonChieff You're an ipse dipshit for saying that.

[@noahwilliams8918]

Never understood the logic of this...if ya wanna attack organizations that do web development there's a real good chance Macs are totally worth hitting. Sooooo many people use 'em these days it's not even funny.

[@CU.SpaceCowboy]

im pretty sure all apt packages are http as well.

[@naisanza]

"Dtrace and fs"-what?

[@tiberiusvetus9113]

fs_usage

[@M3PH11]

I love how this poor guy thinks that normal Apple users actually know what a process is let alone actually look at them..... REGULARLY...... and know what is normal to be running and what isn't. Otherwise a great talk but most of the things covered have probably been patched by the time of my comment. Although you can still break into Windows machines by taking a copy of cmd.exe and renaming it so it matches something else like 8 years after it was first discovered so there is still hope

[@LemonChieff]

Yes because NT is a great kernel… People who really know what they're doing are running the os preinstalled on the pc they got from walmart on black friday. Seeing your profile pic is an evil tux I'm sure you're not part of those idiots.

[@noahwilliams8918]

This totally ignores one of the juiciest targets you'd wanna hit with Macs: Developers