As the worlds most valuable company gains dominance in the computing world, the attention of those wanting to steal our person details is also turning to Apple. This is evident with the Flashback trojan-downloader which, at the time of writing, had infected some 600,000 machines world wide, with 40,000 of those in Australia. It looks like times are changing for the world’s Apple users, and it was only a matter of time before they became a target. So, to the point:
A trojan, also known as a trojan horse program, is a deceptive program that performs additional actions without the user’s knowledge or permission. It does not replicate.
A trojan-downloader is a a trojan that secretly downloads malicious files from a remote server, then installs and executes the files.
What is Flashback?
There are several versions of the Flashback Trojan and it was specifically targeted at Mac users. Flashback is the name for a malicious software program discovered in September 2011 that tried to trick users into installing it by masquerading as an installer for Adobe Flash. Protecting your Mac from Flashback is relatively easy by only download Flash from Adobe.com. Never click download links in emails – no matter who it is from, or download reputable software from companies like Adobe except from their website.
Like all malware, Flashback has evolved to a new form. The current version called Trojan-Downloader:OSX/Flashback.K, connects to a remote site to download its payload; on successful infection, the malware modifies targeted webpages displayed in the web browser.
Must do: Listen to Adam Turner’s View from the Couch about the subject. It’ll be the best 5 minutes you spend on the problem.
How to Detect the Flashback Trojan on Your Mac
Luckily, there are sites on the web that allow you to download a flashback checker. A quick search finds several. One can be found at Softpedia and there will be others.
Note of caution: When downloading files, try and download from reputable sites such as a manufacturers site or reputable anti virus company site. Always check the URL in the address bar of your browser and make sure you’re on a legitimate site. If you don’t feel comfortable doing so, or your gut instinct smells a rat, then DON’T.
I have Flashback, what do I do?
Firstly, don’t panic and run your Mac OS Software Update. Lion and Leopard users will receive a java update which removes the trojan and fixes the hole. Note: There is no Apple fix for 10.5 or earlier which is about 20% of macs. (They’ll want you to upgrade)
Secondly, you could visit a reputable anti virus software site such as F-secure and download a removal tool. Follow the instructions that these company’s give and you should be clean of this trojan with not much effort. Run the detecting software again after removal and reboot to make sure your machine is clean.
Need Help?
If things don’t go as planned, read the page where you downloaded the removal software from. This may give clues and further instructions. Alternatively, log in to the Tech Talk Radio Forum and ask there. Don’t forget to Listen to Adam Turner’s View from the Couch about the subject.
One thing is certain, Macs are not immune to viruses and this won’t be the last time something like this targets the Mac. It’s timely to start looking for software to help protect your computer. For the record, I have both PC and Apple products.




