MacKeeper 0-day flaw more than 20M users affected

Re:MacKeeper 0-day flaw more than 20M users affected by thirdsun on Wednesday May 13, 2015 @07:33AM (#9538148)

I once saw a coworker accidentially installing it and it surely is a nasty piece of malware. The problem is that one can never be quite sure whether every piece of the software was removed, which is why we ended up just reinstalling OS X and avoid guessing.

Since then, a few of my friends, who aren't into tech, almost installed MacKeeper. They all had a long history of using Windows and felt that installing some Anti-Virus, Anti-Malware junk was the most natural thing. For normal users it's really hard to distinguish between legitimate applications/websites and shady stuff.

[ Parent | on HN ]

Re:MacKeeper 0-day flaw more than 20M users affected by orf on Wednesday May 13, 2015 @07:39AM (#9538166)

Their website[1] looks awesome, I don't own a Mac (Windows user) but if I were to buy one I would definitely consider buying and using it. It's good that this site[2] is the second result on Google for "mac keeper" though.

1. http://mackeeper.com

2. http://www.imore.com/avoid-mackeeper

[ Parent | on HN ]

Re:MacKeeper 0-day flaw more than 20M users affected by pbhjpbhj on Wednesday May 13, 2015 @08:23AM (#9538371)

Interestingly the toolkit shown is the Ikea toolkit "Fixa" - I wonder if there's not IP restrictions on their use of such an image.

Edit: I saw this quote on the Mackeeper website you linked (it is good design) "MacKeeper was noticed at Macworld by a journalist from Cult of Mac". So I chased that phrase and all I found was algorithmic page generators like this http://drgogek.com/is/is-mackeeper-really-a-scam-cult-of-mac....

Using a different tack CoM mention Mackeeper in a single page found from their search box, an affiliate promotion page ... using Google unearths more promotions, https://www.google.co.uk/search?q=site%3Acultofmac.com mackeeper.

So, it looks like their quoted reviews are from people they're paying to sell the product, that's a warning sign.

Didn't investigate further.

[ Parent | on HN ]

Re:MacKeeper 0-day flaw more than 20M users affected by cekanoni on Wednesday May 13, 2015 @01:24PM (#9540499)

good find.

[ Parent | on HN ]

Re:MacKeeper 0-day flaw more than 20M users affected by tracker1 on Wednesday May 13, 2015 @03:41PM (#9541454)

Do a search on google for "chrome" and you get any number of adverts for junkware installers before the actual application... this is true of any number of legitimate apps. Let alone if you are duped by an illegitimate app to begin with.

[ Parent | on HN ]

Re:MacKeeper 0-day flaw more than 20M users affected by thirdsun on Wednesday May 13, 2015 @09:58AM (#9538934)

Surprisingly, it does - I just knew them for their shady ads and popups which clearly scream "don't install this!", but this website looks absolutely legitimate. Color me surprised.

[ Parent | on HN ]

Re:MacKeeper 0-day flaw more than 20M users affected by anonfunction on Wednesday May 13, 2015 @08:08AM (#9538282)

http://mackeeper.com/uninstall_mackeeper

[ Parent | on HN ]

Re:MacKeeper 0-day flaw more than 20M users affected by ceejayoz on Wednesday May 13, 2015 @09:53AM (#9538898)

I don't trust borderline malware to uninstall itself.

http://www.imore.com/avoid-mackeeper

> What's more, "uninstalling" MacKeeper doesn't get rid of all of it — you'll find various traces of it in your Mac's system library folder, and they take a bit to get rid of (just search for anything with zeobit or MacKeeper in the name, and you'll turn up files).

[ Parent | on HN ]