IMO, one of the greatest threats to any computer, including Macs, is probably phishing. The second are the vulnerabilities that may exist in our devices.
Apple products are designed to be secure but new vulnerabilities are being discovered and fixed all the time, so we need to keep our devices up to date. And take reasonable steps to minimize the damage should someone access our devices. One of my favorites is:
“an administrator should create a standard user account to use when administrator privileges are not needed. If the security of a standard user is compromised, the potential harm is far more limited than if the user has administrator privileges.”
Antivirus software on Mac or Windows primarily detects malware through virus signatures, which was effective for a long time. However, for over a decade, code obfuscation tools have made it easy to alter malware signatures, reducing the effectiveness of signature-based detection. As a result, antivirus programs have lost their role as the primary defense tool for your system. Unless you’re engaging in risky activities, such as downloading cracked or pirated software, you’re unlikely to see many detections. However, if your antivirus is frequently flagging malware, it may indicate that much of it is slipping past the software.
I have the free version of Malwarebytes which I run every now and then to scan for bad actors but I think @WayneG’s advice is probably more useful. The phishers are getting better at their craft.
I’d add that a sensible backup strategy should be implemented in addition to everything outlined in the support article and other posts. I value my data more than I value my laptop. At this point, besides the financial impact of having to buy a new Mac, or time needed for recovery, I sort of don’t care if anything happens to the actual hardware, as I can quickly be back up and running on something else.
I’m also surprised Apple does not recommend setting up Find My in that support article above, as that can be used to remote wipe a Mac if lost or stolen (which is especially useful if you’ve not done other security precautions and someone gets access).
I wouldn’t bother installing AV software on a Mac and I wouldn’t bother installing anything else than what is already there. Windows is doing a great job protecting the OS with its own tools and so is Mac.
Most 3rd party AV apps will mess up your system, one way or another. Just don’t install stuff you aren’t sure it is safe. Always run AVTotal online scans on files you aren’t sure about. You can use Little Snitch to see what apps are phoning out.
Real malware is still not very common on Mac. You don’t have to be afraid of drivebys and stuff like this. Most common malware still needs user interaction.
Personally, I’m more afraid of software that is collecting data. Like Google stuff. Firewalls are your friend. You could also use a good VPN like Mullvad.
I run the free version of malwarebytes now and again.
I have 1password and keep important documents in there.
I use Devonthink which is end to end encrypted.
I use Little Snitch, possibly a bit of overkill but very interesting to see where your computer is connecting to. The open source blocklists are great.