Apple's Mac has remained untouched from any malware controversy for first 10 years of its release. And this is the fact why Mac OS X is considered more secure than Windows. But the recent malware attack named Flashback has changed everything. The malware has infected more than half million Mac OS X systems worldwide out of which more than 50% are located and U.S. alone.

According to Russian antivirus firm Dr. Web, Flashback is active on more than 600,000 Mac OS X computers worldwide. Kaspersky has also confirmed the figures.

Technically, Flashback cannot be called Trojan Horse. It is a drive-by-download that attacks a system by exploring vulnerability in web applications. Flashback malware inserts its code into Browser-specific applications. When the application launches, Flashback is executed.

Typically Flashback takes advantage of an unknown Java loophole. First, it executes a Java applet installer. After breaking Java security, it downloads a payload into the system. Reportedly, the payload consists of two components. The first one makes sure that Flashback does not launch until the specific Browser-based application is run. This makes the malware a little bit difficult to detect in first sense. The second component is the real malware, which captures screenshots and upload user's personal information to remote servers. The latter component is where the Trojan concept is valid.

Detecting and removing Flashback is quite an easy task. Dr. Web has developed its own Flashback checker. Users just need to insert their system's Hardware UUID in the Web site page and click on Check button detect Flashback. Alternatively, you can download Mashable's scripts for detecting Flashback.

Or, in case your system is infected, simply copy and paste few terminal commands from F-secure Web site to disinfect your system.

The malware has infected a mere 1-2% of total Mac OS X computers. So, we hope that you are not among the infected ones. If your Mac is still safe, it is recommended to download Java patch released by Apple that will not let Flashback to take control. F-Secure has also recommended disabling Java in Web browser, in case you do not need it.

(reported by Johnny Wills, edited by Surojit Chatterjee)