We warned you at the beginning of the year that many of your browser extensions are spying on you, tracking what you are visiting, and even inserting ads into pages. These aren’t just no-name developers either: even Avast, one of the most trusted antivirus vendors was in on the game.
Avast Security (for Mac) delivers effective malware protection along with unusual bonus features. Phishing protection only works well in Chrome and Firefox, but this free utility is still worth a.
Update 2: We just want to point out that this happened in the past, and Avast has cleaned up their act. They have a decent product, and while you can read this for historical purposes, you should know that many of the other antivirus vendors are doing worse things.
Update: Avast has posted a response to our article on their forum. We stand by our article and our research with the exception of one very inconsequential technical detail that we have updated below. The purpose of writing these types of articles isn’t to be vindictive — we just honestly want to make the world a better place for PC users.
Chrome Trusted Sites Mac
Before we go even one step further, it’s important to note that they recently disabled the spying “shopping” feature in their browser extension. So if you are running the latest Chrome with extensions updated, you are fine. For now.
- Avast is an antivirus software that can be downloaded online. It works in conjunction with your Internet server to protect your computer. No option exists to add trusted sites in Firefox, Chrome or Safari, but it can be a useful practice in Internet Explorer.
- Safari doesn't really have instructions for adding trusted sites the way Internet Explorer on Windows does; however, you can add a certificate, if you've received one, in the Utilities folder and then drag it onto Keychain Access (or use the Import menu in Keychain Access).
So Avast has stopped integrating the spying extension, but this is about the principle: you should be able to trust your antivirus provider. Why are they adding a feature that spies on your browsing, inserts ads… and all without properly notifying you?
And why, at the same time, are they claiming to stop spyware, even uninstalling other shopping extensions from other vendors, while they were doing the same thing they are supposed to stop?
On our test system, the only spyware and crapware that Avast actually detected and removed were the ones that competed with their own shopping extension.
Avast Online Security Extension Added a “Shopping” Component
About a week ago, we were playing around with installing a lot of nonsense from crapware sites, so we loaded up trusty Avast antivirus to see how much of the malware it would actually catch during the process. We were shocked to find out that some of the adware wasn’t from a third-party, but from Avast itself.
The problem lies in the SafePrice component of their Online Security extension, which adds shopping recommendations (ads) as you are browsing around the web.
Here’s the thing: many people actually want shopping extensions that help them find better prices — in fact, one of the HTG staff writers recently asked me what was the best way to find better prices. As a standalone product, if you specifically and deliberately choose to install something like this, there’s nothing wrong with it.
The problem is that Avast snuck this component in to their browser extensions that have at least 10 million users for the Chrome version alone. And then they enabled it by default.
Note: as we were doing research for this article, they updated their extension to not include the shopping feature, but it was there since maybe around last December.
Spying, You Say?
You might remember earlier how we said that this extension is spying on you and, unlike many websites, we’re definitely not going to make some claim like that without proof of what is really going on. So we loaded up Fiddler to see what’s really going on behind the scenes and under the hood and behind the curtain.
As it turns out, every single URL that you visit was being sent to Avast servers — first there would be a check to /urlinfo on one of their servers, passing in a unique ID that represents you on every single request. In this way they can build a list of every single page you have ever visited. They claim on their web site that they remove all personally identifying information, but how, exactly, are they able to do that when they are tracking every single page you visit and sending back that URL with a unique ID to represent you?
Update: Avast contacted us to point out that the /urlinfo page that we showed in the screenshot is actually part of their security extension, which does make sense. The /offers page, however, is sending back data as well.
That unique tracking ID is the biggest problem here: while it might not identify you by name, it’s enough to tie your whole browsing history together, and that’s a scary thing.
And remember, you didn’t ask for this. You just wanted to keep yourself safe online with a trusted antivirus provider.
The Bottom Line: Browser Extensions Have Wayyyy Too Much Power
RELATED:Warning: Your Browser Extensions Are Spying On You
This behavior, while ridiculous and sad from a company you should trust, isn’t new at all. Almost every product and service on the Internet and almost every browser extension, app, and website, are doing some form of tracking. Here on How-To Geek we use Google Analytics to see our site statistics, and our advertisers probably use a lot of other tracking that we can’t control. And it’s the same with every single web site.
Personal information and big data have become the standard; because after all: if a product is free, the real product is you. If you are browsing and reading a completely free web site, it’s not that big of a deal… after all, sites like ours need to pay our writers, and advertisements are the only way to do that. The problem is when it’s across everything you do.
The problem is that most browser extensions have access to everything you are seeing on the Internet, across every web site. And they aren’t properly disclosing this to you.
So the next time an extension says it can “Read and modify all your data on the websites you visit”, perhaps you should click that “Remove from Chrome” button instead.
READ NEXT- › How to Use the chown Command on Linux
- › What’s New in Windows 10’s 20H1 Update, Arriving Spring 2020
- › How to Set Up a Child’s Smart Bedroom
- › What Does “FOMO” Mean, and How Do You Use It?
- › How to Fix a Slow or Unresponsive Mac
avast! Free Antivirus for Mac version 9
Pros
Certified by one independent testing lab. Free. Speedy full scan. Network security scanner. Password manager. Website rating. Active Do Not Track.Cons
Poor scores in phishing protection test. Password manager includes only basic features. SiteCorrect feature did not work in testing.Bottom Line
Avast Security (for Mac) delivers effective malware protection along with unusual bonus features. It tanks our antiphishing test, but this free utility is still worth a look.
For years, Mac users basked in the mystique of virus-free computing. It wasn't true, alas, and as time goes on we see more and more Mac-specific malware attacks. The situation may not be nearly as bad as for Window or Android, but prudence still dictates that you install antivirus protection on your Macs as well. Avast Security offers Macs protection against malware along with advanced features including a password manager and a network security scanner, all for a cost of exactly nothing.
Installation went quickly, though I did find I had to separately activate the password manager and the Online Security browser extension from the Tools page. You'll also find Avast's SecureLine VPN on that page, but it's not free like the others. When you click to activate, you get a choice of signing up for $2.99 per month or starting a 30-day trial.
The product's spacious main window features a large status indicator centered in an otherwise-empty white region, with a menu down the left side. It's a very different appearance from Avast Free Antivirus on Windows, which uses pops of purple and green on a dark gray background.
Pricing and OS Support
Like Bitdefender and Kaspersky, Avast supports macOS versions back to 10.9 Mavericks. If you have an antique Mac that for some reason can't even run Mavericks, consider ESET Cyber Security (for Mac),
Like Sophos and Avira, Avast offers full antivirus protection for free. Avast Security Pro (for Mac) costs $59.99 per year for one license or $69.99 for three. The Pro edition adds ransomware protection and real-time notification when new devices connect to your network. The free edition is strictly for non-commercial use; in a business setting, you must pay up.
Good Malware Protection Scores
When reviewing
It took years to develop my hands-on tools and tests for Windows. Most of them don't carry over to the macOS platform. Hence lab results become extremely important for my Mac antivirus reviews. Two of the labs I follow, AV-Test Institute and AV-Comparatives, test Mac antivirus, and Avast participates with one of them.
Experts at AV-Comparatives test Mac antivirus products using the latest macOS malware. They also evaluate each product's ability to detect Windows malware. Why? While a Trojan written for Windows wouldn't run on a Mac, the Mac could serve as a carrier.
Avast managed 99.9 percent protection against Mac malware. That's very good—better than most. However, Bitdefender and Kaspersky exhibited 100 percent protection. In the Windows malware test, Avast detected 100 percent of the samples. Most competing products also took 100 percent. However, Webroot only caught 75 percent, and Intego Mac Internet Security X9 got just 18 percent. Like most tested products, Avast received certification from AV-Comparatives for Mac antivirus protection.
Having one certification is good; having two is better. Bitdefender, Kaspersky, and Sophos are among the products that received certifications from both labs for Mac malware protection.
Scan Choices
Avast offers several scans to improve your Mac's security. A full scan on the Apple MacBook Air 13-Inch that I use for testing took 14.5 minutes, just a hair over Intego's 14 minutes, and quicker than the 18 minutes required by Avira. The average for recent products is 24 minutes, so Avast proved quite speedy. Norton is the current speed champ, completing a full scan in 10 minutes.
There's a separate scan for removable volumes, though you can configure the full scan to include them. I scanned a thumb drive containing my Windows malware collection and found that it quarantined 85 percent of them. For comparison, Avira detected 82 percent of these, while Sophos Home (for Mac) wiped out every single one.
There's no predefined quick scan, which makes sense given the speed of the full scan. The custom scan settings confused me, though. As with the full scan, you can add file locations to exclude from scanning, and configure it to scan Time Machine backups. But the full scan's settings include those
You can schedule a daily, weekly, or monthly scan if desired. Settings for a scheduled scan include two additional choices. You can set it to skip scanning if your device is running on batteries, and you can have it wake from sleep if necessary, to perform its scheduled scan. Avira Free Antivirus for Mac not only offers scheduled scanning, it defaults to a weekly scan with no effort on your part. Sophos skips scheduled scanning, relying instead on real-time protection.
Network Security Scan
The final scan choice doesn't look for malware. Rather, it collects information about all the devices on your network and flags any security problems. On my own network, the scan finished in just under three minutes.
The scanner correctly reported that my main router has an open port that could theoretically become a point of attack. It's true that the port is open, as my ISP uses it to run remote diagnostics when necessary. But that function requires a key that only the ISP has.
More interestingly, it found serious problems with a network storage device (fortunately, one that I'm not currently using). Not only does this device have numerous open ports, it's vulnerable to a buffer overrun attack. Avast advised updating the firmware; I just unplugged it.
The report also serves as a list of everything that's connected to your network, identifying each by name and type. It's similar to the output of Bitdefender Home Scanner. With both products, I found devices with names like unknown6542990b6483—not much help! Bitdefender includes an option to edit the name and type, and it remembers your edits in subsequent scans. I'd like to see that ability in Avast.
Excellent Phishing Protection in Chrome and Firefox
In the Windows realm, one thing that differentiates Avast's premium product is better protection against phishing sites, those fraudulent sites that imitate secure sites and try to steal your login credentials. The free Windows edition scored very poorly, while the premium edition did an extremely good job. Based on initial round of testing, the Mac product's phishing protection, both free and Pro, seemed to match that of the free Windows product, meaning it's not very good.
I learned later that Avast's phishing protection is not fully functional in Safari. The developers are working on making it completely browser-independent. In the meantime, they advise using Chrome or Firefox. Norton was also having problems during my original test, so I tossed those results and started fresh.
My phishing protection test uses URLs reported as fraudulent, but not yet verified. Typically, these are only a few hours old. That's
I simultaneously launch each URL in Safari on the Mac and in a browser protected by long-time antiphishing champ Symantec Norton Security Premium. I also launch each in Chrome, Firefox, and Internet Explorer, relying on the browser's built-in protection. If any of the five browsers throw an error message, I discard the URL. A true phishing fraud masquerades as a secure site and tries to capture your login credentials. Any URL that doesn't match that profile also gets junked.
I've written a Windows-based tool that handles launching URLs and capturing results. On the Mac, I copy and paste each URL into Safari and manually record the result. When I have enough data, I dump the five reports into Excel for comparison.
The malefactors that perpetrate these phishing frauds are clever. They're always devising new techniques to get past security software. That being the case, I report results not as hard figures but as the difference between the product under test and the others.
Tested using Safari's incomplete phishing protection, Avast's detection rate lagged Norton's by 32 percent, and Norton itself was having a bad day. All three browsers soundly drubbed Avast. When I retested using Chrome, Avast tied with Norton and beat the detection rates of the three browsers. That's impressive. Of the Mac security products I've tested, only Bitdefender did better, beating Norton by 5 percentage points.
While phishing is browser-agnostic, phishing protection is not. Bitdefender beat Norton by 5 percentage points, but its Windows cousin more than doubled that gap. Even Symantec Norton Security Deluxe (for Mac) didn't detect many frauds that its Windows edition caught.
Site Rating and Do Not Track
Like McAfee AntiVirus Plus (for Mac), Avira, Trend Micro, and several others, Avast marks up results in popular search engines with green for safe, red for dangerous, and gray for unknown. You can click to vote a page up or down. Simple!
Clicking the Online Safety toolbar button displays the status
Digging into the settings for Online Safety reveals a hidden gem: SiteCorrect. If you mistype a site name, this feature offers to change to the correct name. You can even set it to automatically make the fix, with no prompt. However, in testing, I couldn't tease it into action. I tried pyapal.com, pcmga.com, whitehous.gov, wallmart.com, and many others, with no reaction from SiteCorrect.
Basic Password Manager
Like Avast's Windows antivirus, this product includes
Adding Trusted Sites In Explorer
There's no limit on the number of devices, and you can sync your passwords between them all, macOS, Windows, iOS, and Android. Avast doesn't keep your passwords in the cloud. Rather, it uses your Avast account to authorize syncing data that's stored locally on your devices.
Word For Mac Adding Document Links
Once you've enabled syncing on a device, that device becomes an authenticator for adding more devices. The new device displays a numeric code, and the existing device gets a notification with the same code. If the numbers match, just click to approve. What if you lose all your devices? On installation, Avast sends an email with a recovery link; don't lose that email!
On each of your devices, you create a master password to protect the local password stash. The master passwords need not be the same, but who'd want the confusion of making them different? Avast offers advice on creating a strong password, with a color-coded line representing the strength of what you've typed. It's not easy to get all the way to green, but Avast doesn't require it. In fact, it accepted 'Password' as a master password.
Avast offers browser extensions for Chrome, Firefox, and Safari. When you log in to a site, the extension offers to save your credentials. If you come back to the site, it fills your saved credentials. Clicking the key icon in one of the fields brings up a menu showing all the credentials you've saved. And it handles two-page logins like what Google uses.
Avast doesn't use the typical menu of logins attached to its toolbar button. Rather, you click the button and launch the main application. Unlike the Windows edition, this is a separate app, not integrated with the main antivirus. Its main window is seriously tall and skinny, like something you'd find on a smartphone, and you have only limited control over its size. Clicking an item opens its details, with a link to open the site itself.
Adding Trusted Sites On Safari
You can also use the password manager to sync and share secure notes between your devices. These are simple, unformatted text snippets, suitable for saving such things as locker combinations and non-digital passwords.
The left-rail menu offers simple icons to manage passwords and secure notes, and one to bring up the password generator. By default, it generates 18-character passwords using all character types. You can set the length anywhere from four to 30 characters using a slider.
Avast analyzes the strength of your master password when you first create it, but not when you update it. Avast Pro Antivirus on Windows can analyze your passwords, flagging any weak or duplicate ones. The free Windows edition used to include this feature, but it was recently enhanced and redefined as a Pro-only feature.
This password manager handles all the basic tasks and no more. Fancy features like secure sharing, two-factor authentication, and password inheritance aren't here. But you do get it along with the antivirus, at no charge, so if it does enough for you, go ahead and use it.
Worth a Look
AV-Comparatives certified Avast Security as an effective Mac antivirus. Impressively, it offers a network scanner and password manager, features often reserved for full security suites. On the other hand, the password manager handles basic functions only—nothing advanced. And while Avast earned great stores in my hands-on antiphishing test, that function currently works well in Chrome and Firefox, but not Safari. But the pros outweigh the cons. If you're looking for free Mac antivirus protection, give it a try, along with Sophos and Avira, and see which you like best.
For truly top-notch Mac security, you'll need to lay out some cash. Our Editors' Choice products in this realm are Bitdefender Antivirus for Mac and Kaspersky Internet Security for Mac. Both received certification from two labs. Both scored well in our hands-on antiphishing test. Bitdefender's AutoPilot mode means you can set it and forget it. And Kaspersky goes above and beyond feature-wise, with full-scale parental control, protection against webcam peeping, a network attack blocker, and more.
Avast Security (for Mac)
Pages For Mac Adding A Youtube Video
Bottom Line: Avast Security (for Mac) delivers effective malware protection along with unusual bonus features. Phishing protection only works well in Chrome and Firefox, but this free utility is still worth a look.