Is Apple’s macOS hack-proof?
This test aims to assess the security built into macOS, the operating system that runs Apple’s desktop and laptop personal computers. We also wanted to evaluate the usefulness and effectiveness of anti-virus (aka endpoint security) on macOS against targeted attacks.
If macOS’ in-built security is sufficiently strong, it might not be technically necessary to use anti-virus. You might be able to rely on the security features built into the operating system.
If it’s not sufficiently strong then the next question is, “are popular third-party anti-virus solutions good enough to add value.” In other words, do you need anti-virus on a Mac to stop targeted attacks?
We created targeted attacks using common tools available to, and frequently used by attackers in the real world. The testing team then confirmed that these attacks were viable – that they worked against macOS systems with security settings disabled.
Once we had a library of functional attacks we set up two sets of targets. All targets were Mac computers with security settings enabled. We installed anti-virus software on these.
We chose five well-known anti-malware products that frequently appear in reviews and web searches. Most claim to offer protection against threats in real-time (not just as scans after an attack). These were from the following companies: Bitdefender, Canimaan Software (ClamAVX), ESET, Gen Digital (Norton) and Total Security (TotalAV).
macOS Home Anti-Malware
Targeted attacks are used to take control of a computer and achieve some aim, such as stealing or damaging data. It is not always necessary for an attacker to retain control (aka persistence) to achieve this goal. So the earlier the anti-virus detects the attack, the better.
How well did macOS protect against the threats? Did the anti-virus products help at all? Read on to find out how safe your Mac is.