Skip to Main Content
PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Dok Malware Takes Complete Control of Your Mac

The malware is currently not detected by security suites and uses a valid Apple developer certificate to infect all versions of Mac OS X.

Updated May 1, 2017
Mac OS X desktop

The days of malware being just a problem for Windows users are long gone, with malicious software now appearing for all major operating systems. The latest, and most dangerous to hit the Mac yet, is called OSX/Dok. It targets any and all versions of Mac OS X and will take complete control of your Mac if you let it.

First the good news: in order for Dok to infect a Mac the user needs to open a .zip archive attached to an email. Most people's suspicions will be raised as soon as they see the Dokument.zip archive attached to an email they don't recognize. Those that don't are in for some pain.

According to Check Point, Dok is not currently detected on VirusTotal, meaning it won't get picked up by any security software run on your system (this will likely change quickly). Dok also uses a developer ceritificate that is signed and therefore authenticated by Apple, meaning your Mac will allow it to install and Gatekeeper is on no help.

Once successfully installed on your system, Dok enjoys complete access to all communications, even those sent over encyrpted SSL. Such access is acheieved by quietly redirecting the user's traffic through a malicious proxy server. All traffic can be monitored and the attacker can cherry pick through the details. Once done, the malware deletes itself from the system.

If you do somehow get infected or are asked to help get rid of the malware on a friend's Mac, iMore posted detailed instructions on how to remove Dok. If you're unsure whether it is Dok, scroll through Check Point's detailed Dok article and you'll soon recognize if the malware is the same from the screenshots.

The same advice applies as always: if you have any suspicion at all about an email in your inbox, do not under any circumstances attempt to open the included attachment. 99 percent of the time it's going to be malicious and you'll regret taking the risk. Running a good security suite is also advised.

Apple MacBook Pro 13-Inch (2016) Review
PCMag Logo Apple MacBook Pro 13-Inch (2016) Review

Like What You're Reading?

Sign up for SecurityWatch newsletter for our top privacy and security stories delivered right to your inbox.

This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.


Thanks for signing up!

Your subscription has been confirmed. Keep an eye on your inbox!

Sign up for other newsletters

TRENDING

About Matthew Humphries

Senior Editor

I started working at PCMag in November 2016, covering all areas of technology and video game news. Before that I spent nearly 15 years working at Geek.com as a writer and editor. I also spent the first six years after leaving university as a professional game designer working with Disney, Games Workshop, 20th Century Fox, and Vivendi.

Read Matthew's full bio

Read the latest from Matthew Humphries