New iWorm Worm Specifically Targets OS X – How to Know if Your Mac is Infected

If you find this useful please share it!


Security researchers have discovered a new worm that specifically targets OS X on Macs, and which controls them through Dubbed the “iWorm”, or the “Mac.BackDoor.iWorm”, the iWorm was first publicly reported last week on the Dr. Web anti-virus site. There is a way to check to see if you have the iWorm on your Mac, which we explain below.

Rather than having the infected Mac report directly to a server for its instructions, the criminals behind iWorm issue instructions through posts on Reddit, and the infected Macs check in on Reddit to get their commands.

(Kind of evil genius stuff, if you think about it, as an instruction server can be targeted and taken offline, but nobody is going to take Reddit offline.)


According to the Dr. Web report, so far more than 18,500 Macs are infected with the iWorm. Dr. Web calculates this based on the unique IP addresses from which each infected Mac is connecting.

To determine whether or not your Mac has been infected with the iWorm, follow these steps:

On your Mac, open Finder, click on “Go”, and select “Go to Folder”:

go to folder in finder


This will pop open a window in which to type the path of the folder; what you are looking for is the folder that iWorm creates when it infects your machine. If the folder is there, your Mac is infected.

(Article continues below)
Get notified of new Internet Patrol articles for free!
Or Read Internet Patrol Articles Right in Your Inbox!
as Soon as They are Published! Only $1 a Month!

Imagine being able to read full articles right in your email, or on your phone, without ever having to click through to the website unless you want to! Just $1 a month and you can cancel at any time!
New iWorm Worm Specifically Targets OS X – How to Know if Your Mac is Infected

go to folder finder

We know you're sick of ads on websites. But we still need to pay to keep the lights on for you. So instead of huge ads and video ads, we use smaller, plainer ads. Still, if you'd like to support the Internet Patrol but not the ads, please consider supporting us here:
Donate via Paypal
Other Amount:

Here is the directory path to type into that window:

/Library/Application Support/JavaW

Copy and paste that into the window:

how to check for iworm

Hopefully your results will look like this:

detect iworm go to folder

If so, breathe a sigh of relief, and consider that if you were one of those people who never bothered to get anti-virus software because you have a Mac, well, it’s time to rethink that strategy.

While we have not extensively tested the various Mac anti-virus options out there ourselves, we’ve heard really good things about the free Sophos anti-virus protection.

No Paywall Here!
The Internet Patrol is and always has been free. We don't hide our articles behind a paywall, or restrict the number of articles you can read in a month if you don't give us money. That said, it does cost us money to run the site, so if something you read here was helpful or useful, won't you consider donating something to help keep the Internet Patrol free? Thank you!

New iWorm Worm Specifically Targets OS X – How to Know if Your Mac is Infected

Get notified of new Internet Patrol articles!

If you find this useful please share it!

Leave a Reply

Your email address will not be published. Required fields are marked *