Archive for category: Tips for Mac

You’ve probably heard of the term Malware. Unfortunately it makes headlines regularly these days. The good news is Macs are targeted far less than Windows PCs, but Mac users still need to remain vigilant. A particularly serious type of malware is called “ransomware” because once it infects your computer, it encrypts all your files and holds them for ransom.

Like I said, the good news is despite the virulence of ransomware in the Windows world, where there have been major infections of CryptoWall and WannaCry, only a few pieces of ransomware have been directed at Mac users:

• • The first, called FileCoder, was discovered in 2014. When security researchers looked into its code, they discovered that it was incomplete, and posed no threat at the time.
  • The first fully functional ransomware for the Mac appeared in 2016, a bit of nastiness called KeRanger. It hid inside an infected version of the open source Transmission BitTorrent client and was properly signed so it could circumvent Apple’s Gatekeeper protections. As many as 6500 people may have been infected by KeRanger before Apple revoked the relevant certificate and updated macOS’s XProtect anti-malware technology to block it.

• In 2017, researchers discovered another piece of ransomware, called Patcher, which purported to help users download pirated copies of Adobe Premiere and Microsoft Office 2016. According to its Bitcoin wallet, no one had paid the ransom, which was good, since it had no way of decrypting the files it had encrypted.

Realistically, you don’t worry too much. But it’s likely that malware authors will unleash additional Mac ransomware packages in the future, so we encourage you to be aware, informed, and prepared.

Let’s dig into this a bit further. Apple’s Gatekeeper technology protects your Mac from malware by letting you launch only apps downloaded from the Mac App Store, or those that are signed by developers who have a Developer ID from Apple. Since malware won’t come from legitimate developers (and Apple can revoke stolen signatures), Gatekeeper protects you from most malware. However, you can override Gatekeeper’s protections to run an unsigned app. You will only want t do this for apps from developers you trust. And, of course, even if you never override Gatekeeper, you should be careful what you download.

Apple’s XProtect technology takes a more focused approach, checking every new app against a relatively short list of known malware and preventing apps on that list from launching. You’ll want to make sure to leave the “Install system data files and security updates” checkbox selected in System Preferences > App Store. This will ensure that you get XProtect updates. Similarly, install macOS updates and security updates soon after they’re released to make sure you’re protected against newly discovered vulnerabilities that malware could exploit.

You may also consider running anti-malware software like Malwarebytes Premium or Mac Internet Security X9. That’s not absolutely necessary, I personally don’t run any on my Macs. Of course, if you have a PC, you will want to install anti-malware solutions. If you want peace of mind though and you regularly visit sketchy parts of the Internet or download dodgy software.

What about backups? Although regular backups with Time Machine are usually helpful, KeRanger tried to encrypt Time Machine backup files to prevent users from recovering their data that way. Similarly, a bootable duplicate updated automatically by SuperDuper or Carbon Copy Cloner could end up replacing good files with encrypted ones from a ransomware-infected Mac, or a future piece of ransomware could try to encrypt other mounted backup disks as well.

The best protection against ransomware is a versioned backup made to a destination that can be accessed only through the backup app, such as an Internet backup service like Backblaze (home and business) or CrashPlan (business only). The beauty of such backups is that you can restore files from before the ransomware encrypted them. Of course, that assumes you’ve been backing up all along.

To reiterate, there’s no reason to worry too much about ransomware on the Mac, but letting Apple’s XProtect keep itself up to date, staying current with macOS updates, and using an Internet backup service will likely protect you from what may come.

If you’ve been on a Mac for years, you may know that you can resize nearly any window by dragging its bottom right corner—through. In Mac OS X 10.6 Snow Leopard, there was even a resize handle in that spot. But did you know that, starting in 10.7 Lion, Apple made it possible to resize a window from any edge? You can go to any edge and click and drag to make the window larger or smaller in either direction. Resizing from any corner works as well; click there, and you can drag to resize the window in two directions at once. So if you haven’t updated your habits, try moving the pointer to the edge of a window in the frontmost app, which causes the pointer to change to a double-headed arrow and click and drag. Hope the tip helps!