“Norton – This Mac Is Infected With Viruses” Scam

Cybercriminals constantly devise new tactics to deceive users, and one of the latest scams targeting Mac users is the “Norton – This Mac Is Infected With Viruses” scam. This fraudulent scheme falsely claims that a user’s Mac is infected with malware, aiming to trick them into taking unnecessary actions that could lead to financial loss, identity theft, or further system infections.

---

“Norton – This Mac Is Infected With Viruses” Scam Overview

When users encounter this scam, they typically see a fake Norton-branded webpage displaying a false system scan that claims to detect multiple threats. The scam may use deceptive pop-ups, redirecting users to potentially harmful sites or urging them to download malicious software.

Below is a summary table with crucial details about this threat:

Threat Detail	Description
Threat Name	“Norton – This Mac Is Infected With Viruses” Scam
Threat Type	Phishing, Scam, Mac Malware, Fake Antivirus Warning
Fake Claim	Visitor’s Mac is infected with viruses
Disguise	Norton AntiVirus
Related Domains	febilang[.]xyz
Detection Names (febilang[.]xyz)	Combo Cleaner (Malware), G-Data (Malware), alphaMountain.ai (Suspicious), Forcepoint ThreatSeeker (Suspicious)
Serving IP Address	45.141.156.249
Symptoms of Infection	Fake error messages, fake system warnings, pop-up errors, hoax computer scans
Distribution Methods	Deceptive pop-up ads, software bundling, torrent file downloads
Damage	Unwanted ads, browser tracking, redirection to dubious websites, potential financial loss
Danger Level	High

---

How Does the Scam Work?

This scam operates by:

1. Displaying a fake system scan when users visit a compromised webpage.
2. Showing pop-up alerts claiming the Mac is infected with a keylogger or other malware.
3. Redirecting users to a "Remove Viruses Now" button that leads to:
   • The official Norton website (where scammers fraudulently earn affiliate commissions).
   • Fake Norton websites that distribute potentially unwanted applications (PUAs) or malware.
   • Subscription traps where users are tricked into paying for fake security services.

Potential Consequences

• Installation of adware, browser hijackers, or malware.
• Theft of personal data and credentials.
• Financial losses due to deceptive purchases.
• Exposure to further cyber threats.

---

How to Remove "Norton - This Mac Is Infected With Viruses" Scam

Step 1: Close the Scam Pop-ups

If you encounter this scam, do not click on any buttons or links. Follow these steps:

• Force close your browser (Cmd + Option + Esc > Select browser > Force Quit).
• Restart your Mac and avoid reopening previously closed tabs.

Step 2: Remove Suspicious Applications

1. Open Finder > Applications.
2. Look for any suspicious or unknown applications (especially those installed recently).
3. Drag them to the Trash and empty it.

Step 3: Remove Malicious Browser Extensions

Safari

1. Open Safari.
2. Go to Preferences > Extensions.
3. Remove any unknown or suspicious extensions.

Chrome

1. Open Google Chrome.
2. Click More (⋮) > Extensions.
3. Remove unwanted extensions.

Firefox

1. Open Firefox.
2. Go to Add-ons > Extensions.
3. Disable and remove unknown extensions.

Step 4: Reset Browsers to Default Settings

If unwanted pop-ups persist, reset your browser settings:

• Safari: Preferences > Privacy > Manage Website Data > Remove All
• Chrome: Settings > Reset settings > Restore settings to original defaults
• Firefox: Help > Troubleshooting Information > Refresh Firefox

Step 5: Scan Your Mac with SpyHunter

To ensure complete removal of malware and PUAs:

1. Download and install SpyHunter for Mac.
2. Launch SpyHunter and run a full system scan.
3. Remove any detected threats.

---

Preventing Future Scams

Use Reliable Security Software

Install SpyHunter or another reputable anti-malware tool to detect and block malicious sites.

Enable Pop-up Blockers

• Safari: Preferences > Security > Block pop-up windows
• Chrome: Settings > Privacy and Security > Site Settings > Pop-ups and redirects > Block

Avoid Clicking Suspicious Ads

Never click on unexpected pop-ups or error messages claiming your device is infected.

Keep Your Software Updated

Ensure your macOS, browsers, and security software are always up to date.

Be Cautious with Software Downloads

• Avoid torrent sites and unofficial software sources.
• Read installation prompts carefully to decline bundled software.

---

Conclusion

The "Norton - This Mac Is Infected With Viruses" scam is a deceptive tactic designed to trick Mac users into believing their system is infected. The scammers exploit brand trust to push users toward dangerous downloads or financial fraud.

To protect yourself:

• Do not interact with scam pop-ups.
• Remove any suspicious applications.
• Use SpyHunter for a full system scan and malware removal.
• Implement preventative measures like pop-up blockers and cautious browsing habits.

By following these steps, you can keep your Mac safe from online scams and cyber threats.