Snake, the Windows malware, reaches macOS

One of the most famous malware in Windows, the so-called "Snake" has come to Apple's operating system, macOS. The security of Apple computers is again compromised with this malware that has crossed the border that exists between Windows and macOS. In this article we tell you all the details about this malware and all the keys so that you do not end up infected.

Snake arrives camouflaged in the Adobe Flash installer

This malware comes very discreetly, something that will cause many users to end up infected by this malware. This is because the format in which you have reached macOS is through an Adobe Flash installer. Very reliable, right?

Adobe installer infected with malware Snake | Source: MalwareBytes

If this malware puts us in the target, we will download the .zip file with the installer inside. If we unzip it we will find the file called Adobe Flash Player . So far it seems that everything is identical. How can we distinguish an installer who has this malware from another that is clean? In the developer I sign it. It is very important to be sure that the developer who signs the files that we are going to install is legit. In this case, the installer that will infect the Mac is signed by Addy Symonds and not by Adobe.

When we open this installer signed by a developer other than Adobe, we are asked for the password and we will have before us an installer identical to the Adobe Flash Player . That is why anyone who is not a security obsessor will fall quickly and will deliver all the data by giving you internal permits. All our information will be compromised and can be used by anyone.

There are ways to prevent this type of software from spreading on your device and is activating Gatekeeper on our Mac. As explained above, the only difference between the official Adobe installer and the one owned by Snake is the developer who signs it. In order to avoid being weighed not only this, but other software of unknown developers, it is highly recommended to have Gatekeeper enabled.

This Apple functionality will filter all installers that we try to run on our Mac. That is, it will only allow those who come from the Mac App Store or have it signed by a certified developer if we download it from a third party page. With this, every time we install an unrecognized program, it will send us a warning, although we can ignore it and go ahead with the process, even if you get infected the Mac, it will be your fault because Apple has warned you.

Snake can appropriate all your personal information

To activate this functionality that you comment, you have to access the System Preferences, in the Security and Privacy section. There you must activate "Allow applications from: Mac App Store and certified developers" . So your Mac will be somewhat more secure and will avoid these software containing for example Snake.

If you are already infected, you will need to format your Mac to factory status. And if you need support, go to your nearest Apple Store.