How to remove “Mac OS Firewall-Alert” pop-up scam

What is “Mac OS Firewall-Alert” pop-up scam

Mac OS Firewall-Alert pop-up scam is a deceptive technique employed by cybercriminals to frighten Mac users into taking immediate action by falsely claiming that their system is compromised. This scam typically presents a fake security alert that suggests the macOS firewall has detected Trojan-type spyware, prompting users to contact a fraudulent support number. Appearing legitimate through the use of official-sounding terms and random error codes, it aims to exploit users’ fears of losing their data or experiencing system failures. Upon interaction, victims can be misled into providing personal information, making unnecessary payments for bogus services, or installing actual malware, leading to significant privacy breaches and financial losses. Additionally, these scams often serve as gateways for further malicious activities, including unauthorized remote access to the victim’s system. Ultimately, falling for such scams can result in not only immediate monetary loss but also long-term repercussions, such as identity theft and compromised personal security. Users are encouraged to remain vigilant and verify any alarming messages through official channels to protect themselves from such threats.

Why do I see “Mac OS Firewall-Alert” pop-up continuously?

The “Mac OS Firewall-Alert” pop-up is a deceptive scam that often appears in web browsers on Macs, designed to instill fear and urgency in users. It typically claims that the macOS firewall has detected dangerous malware, manipulated to look like a legitimate security alert. This type of scam is primarily propagated through malicious advertising networks, deceptive websites, or bundled software installations, where users unknowingly download unwanted applications that trigger such alerts. Scammers aim to trick users into calling fraudulent support numbers, leading to potential financial loss or personal information theft. Additionally, the presence of adware or potentially unwanted programs (PUPs) on the system can heighten the likelihood of encountering these alarming pop-ups. To mitigate these threats, users should remain vigilant, avoid interacting with suspicious alerts, and regularly scan their systems with reliable antivirus software.

Remove “Mac OS Firewall-Alert” pop-up manually for free

Remove suspicious applications from MacOS

To start removing “Mac OS Firewall-Alert” pop-up you should uninstall unwanted programs from Applications in MacOS. Malware can be present by different names. It should uninstall correctly, however, we recommend you to use CleanMyMac to clean leftover items after uninstalling. Here are instructions for Mac.

Remove suspicious applications from Mac:

1. In the Finder sidebar, click Applications.
2. Find unknown or suspicious applications.
3. Drag icons of suspicious applications from the Applications folder to the Trash (located at the end of the Dock).
4. Then choose Finder > Empty Trash.

Cannot uninstall apps related to “Mac OS Firewall-Alert” in MacOS

If you can’t uninstall suspicious apps from MacOS using instructions above, or it keeps coming back, you can use free AppCleaner for Mac to remove all residual data and libraries. Follow instructions below:

1. Download free AppCleaner.
2. Drag suspicious applications from Applications folder to AppCleaner window.
3. Choose files and folders you want to remove along with suspicious applications.
4. Click Delete button.

Disable push notifications from suspicious websites in browsers in MacOS

Remove suspicious websites, allowed to show push-notifications in Safari

1. Open Safari, and in the top menu click Safari, choose Preferences.
2. In the Preferences window, click on Websites tab.
3. On the left side, choose Notifications. You will see the list of websites and their settings for showing notifications.
4. Find suspicious ones in the list and click Remove button.

Remove suspicious websites, allowed to show push-notifications in Google Chrome

1. Go to Google Chrome settings, by clicking 3-dots icon in the top-right corner and choosing Settings.
2. On the left side choose Privacy and security menu.
3. Under opened Privacy and security tab, choose Site Settings.
4. Scroll down to Permissions section and click on Notifications (with the bell icon).
5. Go to the bottom list of sites named Allowed to send notifications.
6. Find suspicious ones in the list and click 3-dots icon near it. Click Remove button to delete the website permission.

Remove suspicious websites, allowed to show push-notifications in Mozilla Firefox

1. Go to Mozilla Firefox options, by clicking 3-bars icon in the top-right corner and choosing Settings.
2. On the left panel choose Privacy & Security menu.
3. Scroll down to Permissions section.
4. Near Notifications click Settings… button.
5. Find suspicious ones in the list and click Remove Website to remove it.
6. Click Save Changes button to confirm the action.

Remove malicious add-ons from your browsers

Uninstalling apps related to “Mac OS Firewall-Alert” from Applications often does not bring the desired effect. It sometimes has a browser extension and it may still be active in Safari, Google Chrome, and Mozilla Firefox. Here are instructions on how to remove “”Mac OS Firewall-Alert related extensions from your browsers manually.

Safari:

1. Start Safari on your Mac, click Safari to open drop-down menu and choose Preferences
2. Click Extensions tab.
3. Find suspicious extension.
4. Click Uninstall button to remove it.

Google Chrome:

1. Start Google Chrome browser
2. In address box type (or copy-paste) chrome://extensions.
3. Find suspicious or unwanted extension.
4. Click the Remove button to remove them.
5. Also remove other suspicious extensions from the list.

Mozilla Firefox:

1. Start Mozilla Firefox browser.
2. In address box type (or copy-paste) about:addons.
3. Find suspicious or unwanted extension.
4. Click three-dots icon near it and choose Remove in the menu.
5. In opened dialog window click Remove button to confirm the action.
6. Remove all suspicious extensions from the list.

How to block ads and pop-ups, like “Mac OS Firewall-Alert”

Malicious push-notifications, in most cases, are caused by a program installed on your PC or an add-on installed in browsers. However, sometimes it can appear on a clean computer when visiting a malicious website, using an advertising script. Also, apps that generate “Mac OS Firewall-Alert” pop-up are themselves installed from other pop-ups. To protect your Mac and browsers from phishing websites, pop-up ads, banners, malicious scripts it is recommended to use AdGuard. Download free trial here:

Download AdGuard for Mac