Hacker News Reader

Yet another virus for OSX that you have to manually download a DMG and install to be vulnerable to. Not to be obnoxious, but I'm still waiting for a Windows-style virus that can proliferate with no action on the user's behalf. That would be legitimate cause for concern.

View on HN

Malware that can proliferate on Windows boxes without user action almost always requires some remote code execution vulnerability (or some security misconfiguration issue) to be exploited first. This is true for macOS as well. That cycle is usually:

Exploit vuln -> download malware payload -> execute malware

I think that was GP's point as well. That fully hands-free RCE process just doesn't seem to happen as often on OSX as on windows. Whether that's because of market share, software differences, or something else remains open for debate.

Reply on news.ycombinator.com