DNS Hijacking Malware Targets Mac Users

Yet another scary story brought to our attention via TidBits' author Josh Centers which he links to this article:

https://thehackernews.com/2018/01/macos-dns-hijacker.html

The detail is in the article and tells you to check if you might have a problem.

Ian

go to the terminal via system preferences? sounds like that guy has not used macs very often.

good to know something to keep an eye on thanks for sharing.

Note: If you have Gatekeeper enabled (the Apple default), the problem will not occur unless you authorize it. With Gatekeeper disabled (stupid, IMHO) you are at risk.

When I go to system preferences, I do not get an option to go to terminal. If I do a search, I can get to terminal, however, can't remember the command to type in, and can't find it again?
However, when I go to system preferences/network/advanced/dns, the only DNS servers that show up are: 172.16.1.254 and 142.165.21.5. Does this indicate that I am free of the problem, or do I have to actually check through terminal?
Thanks
Dan

Dan, the article was overblown and wildly inaccurate. It said:

To check if your Mac computer is infected with MaMi malware, go to the terminal via the System Preferences app and check for your DNS settings—particularly look for 82.163.143.135 and 82.163.142.137.

Click to expand...

The error is that you do not get to Terminal through System Preferences. The DNS settings are under Network and can be gotten to through either System Preferences/Network, or by clicking on the WiFi "fan" on the top bar and selecting "Open Network Preferences" and then selecting the interface on the left and Advanced to see the DNS settings. Given what you have, you are good and no reason to panic.

Thanks very much for the reply, Jake.
Dan