People often think Macs are more secure than PCs due to Apple’s tighter control over macOS and the company’s screening process for app developers. However, users are seeing an increase in Mac malware attacks, and Macs aren’t immune to cybersecurity issues. [1] X Research source That means it’s time to double down on your Mac security! To get you started, we’ve answered your top questions related to Mac’s built-in security systems and procedures.
What to Know about Your Mac’s Antivirus Tools
Your Mac comes with antivirus software that works in the background so you don’t have to manually run scans. But if you suspect an infection has gotten past your Mac’s built-in security, third-party apps can help find and fix it.
Steps
Do Macs come with built-in antivirus software?
-
Yes, Macs come with several anti-malware tools. According to Apple, macOS has three built-in layers of anti-malware security. These layers work together to prevent malware from getting into your Mac in the first place—and, if it does, to contain it before it does too much damage. [2] X Research source
- The first layer of protection prevents malware from being distributed through the App Store. Developers who want to distribute their apps in the App Store are required to submit their apps for scanning and Notarisation by Apple.
- Your Mac also uses a combination of tools called Gatekeeper, Notarisation, and XProtect to block malware from running on your computer.
- If malware does manage to get through the first two layers of security, your Mac’s XProtect tool will attempt to fix the infection and remove the malware.
-
Mac’s antivirus tools run automatically. This means you don’t actually have to run scans on your Mac. These security features are always at work in the background, so you don’t need to do anything unless a virus manages to get past your Mac’s built-in defenses.
Do I need third-party antivirus software for my Mac?
-
Most people don’t need additional antivirus software for their Mac. As long as you install all your apps through the App Store, you’re probably fine without antivirus software. [3] X Expert Source Mitch Harris
Consumer Technology Expert Expert Interview. 23 June 2021. Full antivirus suites are expensive, can slow down your computer performance, collect personal data, and often have vulnerabilities. [4] X Research source -
You might want to get it if your Mac is at high risk. On the flip side, if you frequent sketchy sites, are required to protect your computer for work, or deal with very sensitive data, you might want an additional layer of security. And with more Mac-specific malware emerging over the last couple of years, you might want the extra protection even if you’re a typical Mac user. Here are the top-rated options for reputable antivirus software if you want extra peace of mind: [5] X Research source
- Free option: Avast Free Antivirus or Avast One Essential
- Paid options: Bitdefender Antivirus for Mac and Norton 360 Deluxe for Mac
- Always download your software directly from the App Store or the developer’s website.
How do you know if your Mac is infected?
-
Watch for random pop-ups from apps you didn’t install. This is a tactic called scareware. It’s designed to trick you into signing up for a licensed version of malicious/fake software. Popups might also prompt you to download new programs carrying malware. [6] X Research source
-
Look out for mysterious apps on your Mac. If you notice apps appearing on your Mac that you didn’t download, your computer may be infected. It’s especially common for malicious browser extensions to install suspicious apps on your computer. [7] X Research source
-
Watch out for files being held hostage. If you can’t access your files or they’ve been encrypted, your machine’s infected. You might get warning messages demanding that you pay a fine to get your data back. This tactic is called ransomware. Do not pay the ransom, as you have no guarantee that you’ll get your data back. Instead, report the attack to the local authorities. [8] X Research source
- When a ransomware attack happens in a browser window, it’s called a browser locker. Fortunately, in these cases you can just clear the browser cache and the issue should go away. [9] X Research source
-
Your system might run extremely slowly. If you’ve noticed slow machine performance, you might be a botnet victim. That means people have hijacked some of your computing power for their own activities (like mining cryptocurrency). Wipe the malicious program from your computer to fix the issue. [10] X Research source Read on to learn how to do that!
- A computer virus replicating itself can also slow your Mac down. [11] X Research source
-
Be on the lookout for other strange behaviors. A Mac with a malware infection might exhibit a lot of odd “symptoms” as the virus begins to damage your files and software. Look out for these sorts of issues:
- You sometimes find yourself redirected to strange or spammy websites when you try to surf the web.
- Ads pop up even on websites where you don’t usually see them.
- Your contacts tell you they’ve been getting strange messages from you.
How do I remove malware from my Mac?
-
Boot your Mac up in Safe Mode if you suspect an infection. If you think your Mac is infected, booting it up in Safe Mode will prevent malware from loading when you start up. Then, you can safely look for and delete suspicious apps and files. Here’s how to do it: [15] X Research source
- Go to Apple menu > About This Mac to determine what kind of processor your Mac has.
- If your Mac has an Apple M1, M2, or M3 chip (Apple silicon):
- Shut your Mac down completely, then press and hold the power button until you see a screen that says Loading startup options .
- Select a startup volume (usually Macintosh HD).
- Press and hold Shift , then select Continue in Safe Mode .
- If your Mac has an Intel processor:
- Restart your Mac, then immediately press and hold Shift .
- Release Shift and log in when you see the login screen. You may be asked to log in again. Look for Safe Boot in the menu bar at the top of the screen.
-
Locate and delete suspicious apps manually. Go to Finder , then Applications . Finder is usually located in the lower left-hand corner of your toolbar. [16] X Expert Source Mitch Harris
Consumer Technology Expert Expert Interview. 23 June 2021. Click any suspicious apps or apps you don’t remember installing. Control-click the app and hit Move to Trash , then empty the trash . [17] X Research source -
Clear suspicious files out of your Downloads folder. Malware typically gets into your computer when you download infected software or files. Open Finder and navigate to Downloads , then go through and delete any downloads you don’t recognize. Empty the trash when you’re done. [18] X Research source
- Don’t open any files or apps you don’t recognize! Just look at their names. If you can’t see the full name, click the icon once and hit the space bar .
- To prevent your Mac from automatically opening potentially infected downloads, open Safari and go to Safari > Settings > General and uncheck the box next to Open “safe” files after downloading .
-
Remove login items you don’t recognize. Many viruses and malware apps will run as soon as you boot up your computer and log in. To stop this from happening, you can go into your Mac’s setting and clear out login items that look suspicious or unfamiliar. Here’s how: [19] X Research source
- Go to
Apple menu > System Settings…
and select General
from the left-hand menu.
- In some older versions of macOS, go to Apple > System Preferences > Users & Groups instead.
- Click Login Items in the list of options in the main General window.
- In the Open at Login section at the top of the window, select any unwanted or unfamiliar items and click the - button to remove them.
- You can also toggle off any apps you don’t recognize under the Allow in the Background header.
- Go to
Apple menu > System Settings…
and select General
from the left-hand menu.
-
Stop suspicious processes in Activity Monitor. The Activity Monitor shows all the programs and processes that are currently running on your Mac. To access it, click the Spotlight icon in the right side of your menu bar at the top of the screen, then type in activity monitor . Click the top search result to open it. Then:
- Click the Memory tab and look through the apps that are running.
- If you see any apps you don’t recognize, click the symbol that looks like a stop sign with an X inside at the top of the window. Select Quit
or Force Quit
.
- Pay special attention to any unknown apps or processes that are using an unusually large amount of system memory.
- Keep in mind that this will stop the apps from running temporarily, but it won’t get rid of them. To finish the job, search for the apps you found in Finder and delete them, then empty the trash.
-
Delete unknown browser extensions and clear your cache. Browser hijackers are a common type of malware. They often take the form of extensions and plugins. Open any browsers you use on your Mac and disable and remove any extensions, add-ons, or plugins you don’t recognize. Review your browser settings and make sure they all appear correct, then clear your cache .
- You can also clear your Mac’s application and system caches to remove unwanted files, but be careful. If you delete important system files, you could damage your computer.
-
Use antivirus software to remove malware automatically. The antivirus software will perform a scan. Then, it will highlight malware and ask for permission to remove it. You’ll likely need to restart your computer for the changes to take effect. [20] X Research source
- An antivirus app will also safely remove more difficult to access files and data associated with the malware infection.
How do I prevent malware on my Mac?
-
Keep your browser, OS, and apps updated. [21] X Expert Source Mitch Harris
Consumer Technology Expert Expert Interview. 23 June 2021. When you update your computer, you often install security patches that fix vulnerabilities in the software. [22] X Research source The same is true for your browser. If you tend to leave a bunch of tabs open without closing your browser, kick that habit. Close the browser and let it update. [23] X Research source -
Avoid suspicious links and sites. Be wary of sites that redirect you to an address that doesn’t match what you clicked on. Don’t open strange links or attachments from email addresses you don’t recognize. [24] X Research source
- If you click on a bad link, immediately disconnect your device from the internet. Run a scan of your computer, or manually check for bad files/apps. Change your important passwords, and consider setting up a fraud alert on your credit cards/bank accounts. [25] X Research source
-
Back up your data. Since malware can delete, encrypt, and corrupt your data, you need to protect your files in a second location. Either back up your data to the cloud or offload it onto a separate hard drive. [26] X Research source
-
Download apps and files from trusted sources. Whenever possible, download apps from the App Store. Those apps have been tested and approved by Apple, so they should be safe to install. If you must download an app from the web, be sure to get it directly from the developer’s website or some other trusted source.
Expert Q&A
-
QuestionHow can I protect my computer from viruses for free?Mitch Harris is an IT Expert based in the San Francisco Bay Area. Mitch runs his own IT Consulting company called Mitch the Geek, helping individuals and businesses with home office technology, data security, remote support, and cybersecurity compliance. Mitch earned a BS in Psychology, English, and Physics and graduated Cum Laude from Northern Arizona University.I suggest always using built-in applications such as Windows Internet Security. Typically when somebody buys a new laptop they remove McAfee. McAfee would disable Windows Internet Security, which is truthfully all you need, and the closer you are to the operating system, the better off you are. Mac computers typically have Apple's built-in security. Windows Security Essentials protects against both viruses and malware. While the Macintosh Digital Signing protects against both. Another important thing to remember to avoid getting viruses or malware is to keep your browser and software up to date.
Tips
References
- ↑ https://www.nytimes.com/wirecutter/blog/best-antivirus/
- ↑ https://support.apple.com/en-sg/guide/security/sec469d47bd8/web
- ↑ Mitch Harris. Consumer Technology Expert. Expert Interview. 23 June 2021.
- ↑ https://www.nytimes.com/wirecutter/blog/best-antivirus/
- ↑ https://www.pcmag.com/picks/the-best-mac-antivirus-protection
- ↑ https://macsecurity.net/view/265-how-to-know-if-your-mac-has-a-virus
- ↑ https://www.avast.com/c-how-to-remove-virus-from-mac
- ↑ https://www.fbi.gov/how-we-can-help-you/scams-and-safety/common-scams-and-crimes/ransomware
- ↑ https://macsecurity.net/view/265-how-to-know-if-your-mac-has-a-virus
- ↑ https://macsecurity.net/view/265-how-to-know-if-your-mac-has-a-virus
- ↑ https://www.avast.com/c-how-to-remove-virus-from-mac
- ↑ https://www.nytimes.com/wirecutter/blog/internet-security-layers/
- ↑ https://edu.gcfglobal.org/en/internetsafety/how-to-avoid-malware/1/
- ↑ Mitch Harris. Consumer Technology Expert. Expert Interview. 23 June 2021.
- ↑ https://support.apple.com/en-sg/guide/mac-help/mh21245/mac
- ↑ Mitch Harris. Consumer Technology Expert. Expert Interview. 23 June 2021.
- ↑ https://malwaretips.com/blogs/remove-mac-os-x-virus/
- ↑ https://usa.kaspersky.com/resource-center/preemptive-safety/mac-malware-removal
- ↑ https://support.apple.com/en-sg/guide/mac-help/mh15189/mac
- ↑ https://malwaretips.com/blogs/remove-mac-os-x-virus/
- ↑ Mitch Harris. Consumer Technology Expert. Expert Interview. 23 June 2021.
- ↑ https://edu.gcfglobal.org/en/internetsafety/how-to-avoid-malware/1/
- ↑ https://www.nytimes.com/wirecutter/blog/internet-security-layers/
- ↑ https://edu.gcfglobal.org/en/internetsafety/how-to-avoid-malware/1/
- ↑ https://www.agingcare.com/articles/5-steps-to-take-after-clicking-on-a-phishing-link-178044.htm
- ↑ https://edu.gcfglobal.org/en/internetsafety/how-to-avoid-malware/1/